Lucene search

[email protected]CVE-2022-36986

HistoryJul 28, 2022 - 1:15 a.m.

CVE-2022-36986

2022-07-2801:15:17

[email protected]

web.nvd.nist.gov

veritas

netbackup

cve-2022-36986

remote execution

unauthenticated access

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.

Affected configurations

NVD

Node

veritasflex_applianceMatch1.2

veritasflex_applianceMatch1.3

veritasflex_applianceMatch2.0

veritasflex_applianceMatch2.0.1

veritasflex_applianceMatch2.0.2

veritasflex_applianceMatch2.1

veritasflex_scaleMatch1.3.1

veritasflex_scaleMatch2.1

veritasnetbackupMatch8.1.1

veritasnetbackupMatch8.1.2

veritasnetbackupMatch8.2

veritasnetbackupMatch8.3

veritasnetbackupMatch8.3.0.1

veritasnetbackupMatch8.3.0.2

veritasnetbackupMatch9.0

veritasnetbackupMatch9.0.0.1

veritasnetbackupMatch9.1

veritasnetbackupMatch9.1.0.1

veritasnetbackup_applianceMatch3.1.1

veritasnetbackup_applianceMatch3.1.2

veritasnetbackup_applianceMatch3.2

veritasnetbackup_applianceMatch4.0

veritasnetbackup_applianceMatch4.1

veritasnetbackup_applianceMatch3.2maintenance_release1

veritasnetbackup_applianceMatch3.2maintenance_release2

veritasnetbackup_applianceMatch3.2maintenance_release3

veritasnetbackup_applianceMatch3.3.0.1maintenance_release1

veritasnetbackup_applianceMatch3.3.0.1maintenance_release2

veritasnetbackup_applianceMatch3.3.0.2maintenance_release1

veritasnetbackup_applianceMatch3.3.0.2maintenance_release2

veritasnetbackup_applianceMatch4.0.0.1maintenance_release1

veritasnetbackup_applianceMatch4.0.0.1maintenance_release2

veritasnetbackup_applianceMatch4.0.0.1maintenance_release3

veritasnetbackup_applianceMatch4.1.0.1maintenance_release1

veritasnetbackup_applianceMatch4.1.0.1maintenance_release2

CPENameOperatorVersion
veritas:flex_applianceveritas flex applianceeq1.2
veritas:flex_applianceveritas flex applianceeq1.3
veritas:flex_applianceveritas flex applianceeq2.0
veritas:flex_applianceveritas flex applianceeq2.0.1
veritas:flex_applianceveritas flex applianceeq2.0.2
veritas:flex_applianceveritas flex applianceeq2.1
veritas:flex_scaleveritas flex scaleeq1.3.1
veritas:flex_scaleveritas flex scaleeq2.1
veritas:netbackupveritas netbackupeq8.1.1
veritas:netbackupveritas netbackupeq8.1.2

CPE	Name	Operator	Version
veritas:flex_appliance	veritas flex appliance	eq	1.2
veritas:flex_appliance	veritas flex appliance	eq	1.3
veritas:flex_appliance	veritas flex appliance	eq	2.0
veritas:flex_appliance	veritas flex appliance	eq	2.0.1
veritas:flex_appliance	veritas flex appliance	eq	2.0.2
veritas:flex_appliance	veritas flex appliance	eq	2.1
veritas:flex_scale	veritas flex scale	eq	1.3.1
veritas:flex_scale	veritas flex scale	eq	2.1
veritas:netbackup	veritas netbackup	eq	8.1.1
veritas:netbackup	veritas netbackup	eq	8.1.2

Rows per page:

1-10 of 271

References

www.veritas.com/content/support/en_US/security/VTS22-004#h3

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

Related for CVE-2022-36986

cvelist1 nvd1 prion1