PT-2019-13685 · Veritas · Veritas Resiliency Platform

Published 2019-07-29 · Updated 2023-03-03 · CVE-2019-14416

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Veritas Resiliency Platform versions prior to 3.4 HF1

Description An issue allows a malicious user to execute commands with root privilege within the virtual machine, related to resiliency plans and custom script functionality.

Recommendations For versions prior to 3.4 HF1, update to version 3.4 HF1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2019-14416

Affected Products

Veritas Resiliency Platform

References · 5

• https://veritas.com/content/support/en_US/security/VTS19-002.html#Issue3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14416 · Security Note
• http://seclists.org/fulldisclosure/2019/Jul/39 · Note
• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html · Note