PT-2021-11943

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup and OpsCenter versions through 8.3.0.1 Description: An issue was discovered in Veritas NetBackup and OpsCenter where NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exis...

CVE-2020-36163: Undefined Security Weakness

An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under...

Veritas NetBackup和Veritas NetBackup Opscenter 访问控制错误漏洞

Veritas NetBackup and Veritas NetBackup Opscenter are both products of Veritas, Inc. Veritas NetBackup is a storage service that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual...

Veritas NetBackup Opscenter Security Vulnerability

Veritas NetBackup Opscenter is a software from Veritas, Inc. that provides administrative functions to the Veritas NetBackup backup system. A security vulnerability exists in Veritas NetBackup and OpsCenter through 8.3.0.1, which can be exploited by an attacker to execute arbitrary code as a syst...

Vulnerabilities fixed in Veritas products

Vulnerabilities have been fixed in Veritas Backup Exec and Veritas NetBackup. The vulnerabilities allow a local attacker to to obtain elevated privileges. The vulnerability makes it possible for the attacker to execute arbitrary code under SYSTEM or administrator. The vulnerabilities rated by...

NetBackup 7.0 - (NetBackup INET Daemon) Unquoted Service Path Vulnerability

Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path Discovery by: Alan Mondragon "El Masas" Vendor Homepage: https://www.veritas.com/ Software Link : https://www.veritas.com/ Veritas Tested Version: 7.0 Vulnerability Type: Unquoted t Service Path Tested on OS: Windows...

NetBackup 7.0 - NetBackup INET Daemon Unquoted Service Path

NetBackup 7.0 - NetBackup INET Daemon Unquoted Service Path Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path Discovery by: Alan Mondragon "El Masas" Discovery Date: 2020-03-17 Vendor Homepage: https://www.veritas.com/ Software Link : https://www.veritas.com/ Veritas...

NetBackup 7.0 Unquoted Service Path

Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path Discovery by: Alan Mondragon "El Masas" Discovery Date: 2020-03-17 Vendor Homepage: https://www.veritas.com/ Software Link : https://www.veritas.com/ Veritas Tested Version: 7.0 Vulnerability Type: Unquoted t Service Pat...

NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path

Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path Discovery by: Alan Mondragon "El Masas" Discovery Date: 2020-03-17 Vendor Homepage: https://www.veritas.com/ Software Link : https://www.veritas.com/ Veritas Tested Version: 7.0 Vulnerability Type: Unquoted t Service Pat...

CVE-2019-9867

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator...

CVE-2019-9868

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

CVE-2019-9867

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator...

CVE-2019-9868

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

Default credentials

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

Design/Logic Flaw

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator...

CVE-2019-9868

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

CVE-2019-9868

Affected product: Veritas NetBackup Appliance Web Console (versions up to 3.1.2). Issue: SMTP password is disclosed to an administrator via the Web Console UI. Root cause details are not provided in the given documents. Impact: potential exposure of SMTP credentials to users with Web Console acce...

CVE-2019-9867

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator...

CVE-2019-9867

The CVE-2019-9867 issue affects Veritas NetBackup Appliance Web Console up to version 3.1.2, where the proxy server password is disclosed to an administrator. The available records do not specify the root cause details, vulnerable component version beyond the Web Console, or explicit exploitation...

PT-2019-19902

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Appliance versions through 3.1.2 Description An issue in the Web Console of Veritas NetBackup Appliance allows the proxy server password to be displayed to an administrator. Recommendations For versions through 3.1.2, update ...