PT-2020-4928 · Veritas · Veritas Aptare

Published 2020-10-15 · Updated 2020-10-20 · CVE-2020-27157

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Veritas APTARE versions prior to 10.5

Description: The issue is related to bypassing the authentication procedure, allowing a remote attacker to gain access to data and functionality available to a targeted user account. This can be achieved by providing specific authentication credentials to the server, which bypasses the normal login process.

Recommendations: For Veritas APTARE versions prior to 10.5, update to version 10.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the application to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

BDU:2020-05503

CVE-2020-27157

Affected Products

Veritas Aptare

References · 6

• https://osv.dev/vulnerability/CVE-2020-27157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05503 · Security Note
• https://veritas.com/content/support/en_US/security/VTS20-006#issue2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27157 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020101906 · Note
• https://veritas.com/content/support/en_US/security/VTS20-006#issue1 · Note