PT-2019-19903

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Appliance versions through 3.1.2 Description An issue in the Web Console of Veritas NetBackup Appliance causes the SMTP password to be displayed to an administrator. Recommendations For versions through 3.1.2, update to a...

CVE-2019-9867: Insufficiently Protected Credentials

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator...

CVE-2019-9868: Insufficiently Protected Credentials

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator...

Veritas NetBackup Appliance Detection (HTTP)

HTTP based detection of Veritas NetBackup Appliance. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

CVE-2018-18652

The CVE-2018-18652 entry concerns Veritas NetBackup Appliance prior to 3.1.2. It describes a remote command execution vulnerability caused by insufficient filtering of user-provided input, permitting authenticated administrators to execute arbitrary commands as root. The connected sources substan...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

PT-2018-14562

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Appliance versions prior to 3.1.2 Description A remote command execution issue allows authenticated administrators to execute arbitrary commands as root due to insufficient filtering of user-provided input. Recommendations Fo...

CVE-2018-18652: Undefined Security Weakness

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

The vulnerability of the Veritas Access data storage system and the software tools for backup and data recovery, namely Veritas NetBackup and Veritas NetBackup Appliance, stems from insufficient restrictions on the execution of authorized user commands. This allows attackers to execute arbitrary privileged commands.

The vulnerability of the Veritas Access data storage system and the NetBackup and NetBackup Appliance backup and recovery software lies in the insufficient restrictions on the execution of authorized user commands. Exploiting this vulnerability allows an attacker to execute arbitrary privileged...

The vulnerability of the Veritas Access data storage system and its backup/restore software, Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. This vulnerability allows an attacker to execute commands with root/admin privileges.

The vulnerability of the Veritas Access data storage system, as well as the software tools for backup and recovery with Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. Exploiting this vulnerability could allow an attacker to execute commands on the...

The vulnerability of the Veritas Access data storage system and its backup/restore software, Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. This vulnerability allows an attacker to execute arbitrary commands on the NetBackup server or client with root/admin privileges.

The vulnerability of the Veritas Storage System and the software tools for backup and data recovery, such as Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. Exploiting this vulnerability could allow an attacker to execute arbitrary commands on the...

The vulnerability of the “scripts/license.pl” script in the Veritas NetBackup Appliance backup solution allows a perpetrator to execute arbitrary commands.

The vulnerability of the “scripts/license.pl” script in the Veritas NetBackup Appliance backup solution is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the “hostName” parameter ...

Veritas NetBackup Appliance < 2.7.2 / 3.1.0 Multiple Vulnerabilities (VTS17-003)

According to its self-reported version, the remote Veritas NetBackup Appliance is 2.7.x or 3.0.x. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid104888;...

Information disclosure

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...

CVE-2017-15517

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...

CVE-2017-15517

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...

CVE-2017-15517

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...