Lucene search

[email protected]CVE-2022-36997

HistoryJul 28, 2022 - 1:15 a.m.

CVE-2022-36997

2022-07-2801:15:18

CWE-918

[email protected]

web.nvd.nist.gov

veritas

netbackup

security

vulnerability

cve-2022-36997

authenticated

ssrf

denial of service

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.

Affected configurations

NVD

Node

veritasflex_applianceMatch1.2

veritasflex_applianceMatch1.3

veritasflex_applianceMatch2.0

veritasflex_applianceMatch2.0.1

veritasflex_applianceMatch2.0.2

veritasflex_applianceMatch2.1

veritasflex_scaleMatch1.3.1

veritasflex_scaleMatch2.1

veritasnetbackupMatch8.1.1

veritasnetbackupMatch8.1.2

veritasnetbackupMatch8.2

veritasnetbackupMatch8.3

veritasnetbackupMatch8.3.0.1

veritasnetbackupMatch8.3.0.2

veritasnetbackupMatch9.0

veritasnetbackupMatch9.0.0.1

veritasnetbackupMatch9.1

veritasnetbackupMatch9.1.0.1

veritasnetbackup_applianceMatch3.1.1

veritasnetbackup_applianceMatch3.1.2

veritasnetbackup_applianceMatch3.2

veritasnetbackup_applianceMatch4.0

veritasnetbackup_applianceMatch4.1

veritasnetbackup_applianceMatch3.2maintenance_release1

veritasnetbackup_applianceMatch3.2maintenance_release2

veritasnetbackup_applianceMatch3.2maintenance_release3

veritasnetbackup_applianceMatch3.3.0.1maintenance_release1

veritasnetbackup_applianceMatch3.3.0.1maintenance_release2

veritasnetbackup_applianceMatch3.3.0.2maintenance_release1

veritasnetbackup_applianceMatch3.3.0.2maintenance_release2

veritasnetbackup_applianceMatch4.0.0.1maintenance_release1

veritasnetbackup_applianceMatch4.0.0.1maintenance_release2

veritasnetbackup_applianceMatch4.0.0.1maintenance_release3

veritasnetbackup_applianceMatch4.1.0.1maintenance_release1

veritasnetbackup_applianceMatch4.1.0.1maintenance_release2

CPENameOperatorVersion
veritas:flex_applianceveritas flex applianceeq1.2
veritas:flex_applianceveritas flex applianceeq1.3
veritas:flex_applianceveritas flex applianceeq2.0
veritas:flex_applianceveritas flex applianceeq2.0.1
veritas:flex_applianceveritas flex applianceeq2.0.2
veritas:flex_applianceveritas flex applianceeq2.1
veritas:flex_scaleveritas flex scaleeq1.3.1
veritas:flex_scaleveritas flex scaleeq2.1
veritas:netbackupveritas netbackupeq8.1.1
veritas:netbackupveritas netbackupeq8.1.2

CPE	Name	Operator	Version
veritas:flex_appliance	veritas flex appliance	eq	1.2
veritas:flex_appliance	veritas flex appliance	eq	1.3
veritas:flex_appliance	veritas flex appliance	eq	2.0
veritas:flex_appliance	veritas flex appliance	eq	2.0.1
veritas:flex_appliance	veritas flex appliance	eq	2.0.2
veritas:flex_appliance	veritas flex appliance	eq	2.1
veritas:flex_scale	veritas flex scale	eq	1.3.1
veritas:flex_scale	veritas flex scale	eq	2.1
veritas:netbackup	veritas netbackup	eq	8.1.1
veritas:netbackup	veritas netbackup	eq	8.1.2

Rows per page:

1-10 of 271

References

www.veritas.com/content/support/en_US/security/VTS22-004#h9

Social References

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for CVE-2022-36997

cvelist1 nvd1 prion1