Lucene search
+L

1141 matches found

OSV
OSV
•added 2023/03/23 4:17 a.m.•14 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS7AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/23 4:17 a.m.•36 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS6.8AI score0.00153EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/23 4:17 a.m.•33 views

Design/Logic Flaw

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

4.3CVSS7.4AI score0.0019EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/03/23 4:17 a.m.•29 views

Command injection

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

3.2CVSS6.8AI score0.00153EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/03/23 12:00 a.m.•15 views

Veritas NetBackup 安全漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas NetBackup versions prior to 8.3.0.2 that originates from allowing an unprivileged user to specify the path to a log file...

7.1CVSS7AI score0.00153EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/23 12:00 a.m.•16 views

Veritas Technologies Veritas NetBackup 代码问题漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A code issue vulnerability exists in Veritas Technologies Veritas NetBackup versions prior to 10.0, which stems from a flaw in the way DLL paths are verified prior...

7.8CVSS7.4AI score0.0019EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/03/23 12:00 a.m.•49 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS7AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/23 12:00 a.m.•33 views

CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.7AI score0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/03/23 12:00 a.m.•8 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS6.8AI score0.00153EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/23 12:00 a.m.•21 views

PT-2023-21942 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Description: A vulnerability exists in the way the client validates the path to a DLL prior to loading, which may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.1AI score0.0019EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/23 12:00 a.m.•16 views

PT-2023-21941 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 8.3.0.2 Description: An issue was discovered that allows an unprivileged user to specify a log file path when executing a NetBackup command, potentially leading to the overwrite of existing NetBackup log...

7.1CVSS7.1AI score0.00153EPSS
SaveExploits0References3
CVE
CVE
•added 2023/03/23 12:00 a.m.•139 views

CVE-2023-28759

CVE-2023-28759 affects Veritas NetBackup on Windows prior to 10.0. The issue stems from the NetBackup client’s loading of DLLs, where path validation may allow a lower-privileged user to elevate privileges and compromise the system. Impact includes local privilege escalation; remediation is to up...

7.8CVSS7.4AI score0.0019EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/23 12:00 a.m.•4 views

CVE-2023-28759: Uncontrolled Search Path Element

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS5.8AI score0.0019EPSS
SaveExploits0References3
CVE
CVE
•added 2023/03/23 12:00 a.m.•78 views

CVE-2023-28758

Veritas NetBackup pre-8.3.0.2 is affected by CVE-2023-28758. The BPCD component allows an unprivileged user to specify a log file path when running a NetBackup command, enabling overwriting of existing NetBackup log files. This is a local impact with potential log tampering. Remediation: upgrade ...

7.1CVSS6.8AI score0.00153EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/23 12:00 a.m.•2 views

CVE-2023-28758: Improper Privilege Management

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS5.7AI score0.00153EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/03/23 12:00 a.m.•10 views

CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.5AI score0.0019EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/01/01 12:00 a.m.•19 views

The vulnerability of the Java Admin Console software tools for backup and data restoration in NetBackup Appliances and NetBackup allows a malicious actor to execute arbitrary commands as the root user.

The vulnerability of the Java Admin Console software tools for backup and recovery operations of NetBackup Appliances and NetBackup relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow a malicious actor t...

7.5CVSS7.9AI score0.00801EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2022/12/04 5:15 a.m.•19 views

CVE-2022-46414

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal...

9.8CVSS5.9AI score0.01363EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/04 5:15 a.m.•16 views

CVE-2022-46412

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands...

8.8CVSS5.8AI score0.00728EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/04 5:15 a.m.•18 views

CVE-2022-46413

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal...

8.8CVSS5.9AI score0.01507EPSS
SaveExploits0References1
Rows per page
Query Builder