Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-28818
HistoryMar 24, 2023 - 4:15 a.m.

Design/Logic Flaw

2023-03-2404:15:00
PRIOn knowledge base
www.prio-n.com
2
veritas netbackup
it analytics
upgrade process
unsigned files
unauthentic components
malicious actor
rogue collector executable files
portal server
nvd

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors.

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

Related for PRION:CVE-2023-28818