PT-2017-17047
CVE-2017-6409
·
Published
2017-03-02
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Veritas NetBackup versions 8.0 and earlier
Veritas NetBackup Appliance versions 3.0 and earlier
Description
An issue was discovered that allows unauthenticated access through CORBA interfaces, permitting inappropriate access.
Recommendations
For Veritas NetBackup versions 8.0 and earlier, update to a version later than 8.0 to resolve the issue.
For Veritas NetBackup Appliance versions 3.0 and earlier, update to a version later than 3.0 to resolve the issue.
As a temporary workaround, consider restricting access to the CORBA interfaces until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾