CVE-2022-36985

Published: Jul 28, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.

Affected (35)

Products: Veritas: Flex Appliance, Flex Scale, Netbackup, Netbackup Appliance

4 products

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Veritas Flex Appliance	Version 1.2
Veritas Flex Appliance	Version 1.3
Veritas Flex Appliance	Version 2.0.1
Veritas Flex Appliance	Version 2.0.2
Veritas Flex Appliance	Version 2.0
Veritas Flex Appliance	Version 2.1
Veritas Flex Scale	Version 1.3.1
Veritas Flex Scale	Version 2.1
Veritas Netbackup	Version 8.1.1
Veritas Netbackup	Version 8.1.2
Veritas Netbackup	Version 8.2
Veritas Netbackup	Version 8.3.0.1
Veritas Netbackup	Version 8.3.0.2
Veritas Netbackup	Version 8.3
Veritas Netbackup	Version 9.0.0.1
Veritas Netbackup	Version 9.0
Veritas Netbackup	Version 9.1.0.1
Veritas Netbackup	Version 9.1
Veritas Netbackup Appliance	Version 3.1.1
Veritas Netbackup Appliance	Version 3.1.2
Veritas Netbackup Appliance	Version 3.2
Veritas Netbackup Appliance	Version 4.0
Veritas Netbackup Appliance	Version 4.1
Veritas Netbackup Appliance	Version 3.2 maintenance_release1
Veritas Netbackup Appliance	Version 3.2 maintenance_release2
Veritas Netbackup Appliance	Version 3.2 maintenance_release3
Veritas Netbackup Appliance	Version 3.3.0.1 maintenance_release1
Veritas Netbackup Appliance	Version 3.3.0.1 maintenance_release2
Veritas Netbackup Appliance	Version 3.3.0.2 maintenance_release1
Veritas Netbackup Appliance	Version 3.3.0.2 maintenance_release2
Veritas Netbackup Appliance	Version 4.0.0.1 maintenance_release1
Veritas Netbackup Appliance	Version 4.0.0.1 maintenance_release2
Veritas Netbackup Appliance	Version 4.0.0.1 maintenance_release3
Veritas Netbackup Appliance	Version 4.1.0.1 maintenance_release1
Veritas Netbackup Appliance	Version 4.1.0.1 maintenance_release2

References (2)

https://www.veritas.com/content/support/en_US/security/VTS22-004#h7

Source: cve@mitre.org

PatchVendor Advisory

https://www.veritas.com/content/support/en_US/security/VTS22-004#h7

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.