PT-2020-4926 · Veritas · Veritas Aptare

Published 2020-10-15 · Updated 2020-10-20 · CVE-2020-27156

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Veritas APTARE versions prior to 10.5

Description: The issue is related to inadequate authorization checks, which could allow for remote code execution by an unauthenticated user. The vulnerability is associated with incorrect authorization in the APTARE data management platform, enabling a remote attacker to execute arbitrary code.

Recommendations: For versions prior to 10.5, update to version 10.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the platform to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2020-05501

CVE-2020-27156

Affected Products

Veritas Aptare

References · 5

• https://veritas.com/content/support/en_US/security/VTS20-006#issue1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-27156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27156 · Security Note
• https://bdu.fstec.ru/vul/2020-05501 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020101906 · Note