CVE-2013-4677

Published: Aug 5, 2013Modified: Apr 29, 2026

4.3

Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 3.1 / Impact: 6.4

Source: NVD

Description

Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.

Affected (5)

Products: Symantec: Backup Exec

Symantec

1 product

Backup Exec

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Symantec Backup Exec	Version 2010
Symantec Backup Exec	Version 2010_r3 sp1
Symantec Backup Exec	Version 2010_r3 sp2
Symantec Backup Exec	Version 2012
Symantec Backup Exec	Version 2012 sp1