CVE-2022-46410

CVE-2022-46410 affects Veritas NetBackup Flex Scale up to version 3.0. An attacker with non-root privileges can escalate to root by using specific commands. The available sources confirm a privilege-escalation vulnerability with high severity (CVSS v3.1: 8.8, HIGH) affecting the product, but do n...

CVE-2022-46411

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 8.0.0–8.0.100) are affected by a default-password issue that persists post-install, enabling potential privilege escalation if the credentials are discovered. The vulnerability is caused by retained default c...

CVE-2022-46413

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 1.0–8.0.100) are affected by CVE-2022-46413, with authenticated remote command execution via the management portal. PT-Security details remediation: update Flex Scale to a version later than 3.0 and the Acces...

CVE-2022-46412

CVE-2022-46412 affects Veritas NetBackup Flex Scale up to version 3.0. A non-privileged user can escape a restricted shell and execute privileged commands, enabling high-impact local privilege escalation. The available documents describe the vulnerability scenario and impact (CVE details, NVD/Red...

Veritas Technologies NetBackup Flex Scale 安全漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. A security vulnerability exists in Veritas Technologies NetBackup Flex Scale 3.0 and...

Veritas Technologies NetBackup Flex Scale 授权问题漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. An authorization issue vulnerability exists in Veritas NetBackup Flex Scale 3.0 and...

CVE-2022-46410

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands...

PT-2022-27859 · Veritas · Veritas Netbackup Flex Scale

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions through 3.0 Description: An issue was discovered in Veritas NetBackup Flex Scale, where an attacker with non-root privileges may escalate privileges to root by using specific commands. Recommendations: Fo...

PT-2022-27860 · Veritas · Veritas Netbackup Access Appliance +1

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions 1.0 through 3.0 Veritas NetBackup Access Appliance versions 8.0.0 through 8.0.100 Description: An issue was discovered where a default password is persisted after installation and may be discovered and us...

PT-2022-27863 · Veritas · Veritas Netbackup Access Appliance +1

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions 1.0 through 3.0 Veritas NetBackup Access Appliance versions 8.0.0 through 8.0.100 Description: An issue was discovered that allows unauthenticated remote command execution via the management portal...

CVE-2022-46414: Missing Authentication for Critical Function

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal...

CVE-2022-46412: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands...

CVE-2022-46413: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal...

CVE-2022-46411: Improper Authentication

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

CVE-2022-46410: Improper Privilege Management

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands...

PT-2022-27861 · Veritas · Veritas Netbackup Flex Scale

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions through 3.0 Description: An issue was discovered that allows a non-privileged user to escape a restricted shell and execute privileged commands. Recommendations: For Veritas NetBackup Flex Scale versions...

CVE-2022-46414

CVE-2022-46414 affects Veritas NetBackup Flex Scale up to 3.0 and NetBackup Access Appliance up to 8.0.100, permitting unauthenticated remote command execution via the management portal. CVSS v3.1 base score 9.8 (CRITICAL). Remediation: upgrade Veritas NetBackup Flex Scale to a version later than...

Sandbox_Scryer - Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output

The Sandbox Scryer is an open-source tool for producing threat hunting and intelligence data from public sandbox detonation output The tool leverages the MITRE ATT&CK Framework to organize and prioritize findings, assisting in the assembly of IOCs, understanding attack movement and in threat...

42,000 phishing domains discovered masquerading as popular brands

By Deeba Ahmed According to researchers, this scam is highly sophisticated and large-scale, targeting brands like McDonald’s, Unilever, Emirates, Knorr, Coca-Cola, etc. This is a post from HackRead.com Read the original post: 42,000 phishing domains discovered masquerading as popular brands...

CVE-2022-22240

An Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated low privileged attacker to cause a Denial of Sevice Do...