2 matches found
Code injection
Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...
CVE-2015-6551
Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4, and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4, expose an information-disclosure vulnerability due to not using TLS for administration-console traffic to the NBU server. This allows a remote attacker to sniff ke...