PT-2022-23701 · Veritas · Veritas Netbackup Opscenter
CVE-2022-36954
·
Published
2022-07-27
·
Updated
2022-08-03
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Veritas NetBackup OpsCenter versions 8.x through 8.3.0.2
Veritas NetBackup OpsCenter versions 9.x through 9.0.0.1
Veritas NetBackup OpsCenter versions 9.1.x through 9.1.0.1
Veritas NetBackup OpsCenter version 10
Description
An authenticated remote attacker may be able to create or modify OpsCenter user accounts under specific conditions.
Recommendations
For versions 8.x through 8.3.0.2, update to a version outside of this range to resolve the issue.
For versions 9.x through 9.0.0.1, update to a version outside of this range to resolve the issue.
For versions 9.1.x through 9.1.0.1, update to a version outside of this range to resolve the issue.
For version 10, update to a version outside of this range to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Veritas Netbackup Opscenter