PT-2022-23699 · Veritas · Veritas Netbackup Opscenter
CVE-2022-36952
·
Published
2022-07-27
·
Updated
2022-08-03
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Veritas NetBackup OpsCenter versions 8.x through 8.3.0.2
Veritas NetBackup OpsCenter versions 9.x through 9.0.0.1
Veritas NetBackup OpsCenter versions 9.1.x through 9.1.0.1
Veritas NetBackup OpsCenter version 10
Description
A hard-coded credential exists in Veritas NetBackup OpsCenter that could be used to exploit the underlying VxSS subsystem.
Recommendations
For versions 8.x through 8.3.0.2, update to a version outside of this range to resolve the issue.
For versions 9.x through 9.0.0.1, update to a version outside of this range to resolve the issue.
For versions 9.1.x through 9.1.0.1, update to a version outside of this range to resolve the issue.
For version 10, update to a newer version to resolve the issue.
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Veritas Netbackup Opscenter