PT-2019-13686 · Veritas · Veritas Resiliency Platform

Publicado 2019-07-29 · Atualizado 2020-08-24 · CVE-2019-14417

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Veritas Resiliency Platform versions prior to 3.4 HF1

Description An issue in the DNS functionality of the software allows a malicious user to execute arbitrary commands with root privilege within the virtual machine.

Recommendations For versions prior to 3.4 HF1, update to version 3.4 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS functionality to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2019-14417

Produtos afetados

Veritas Resiliency Platform

Referências · 5

• http://seclists.org/fulldisclosure/2019/Jul/39 · Nota
• https://veritas.com/content/support/en_US/security/VTS19-002.html#Issue2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14417 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-14417 · Aviso do Fabricante
• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html · Nota