PT-2021-11944 · Veritas · Veritas Enterprise Vault

Published 2021-01-06 · Updated 2021-01-11 · CVE-2020-36164

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions prior to 14.1

Description: An issue was discovered where Veritas Enterprise Vault loads the OpenSSL library on start-up, which attempts to load the openssl.cnf configuration file from specific locations. A low-privileged user can create a malicious openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker to access all data and installed applications.

Recommendations: For Veritas Enterprise Vault versions prior to 14.1, update to version 14.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the directories where the openssl.cnf configuration file can be created to prevent low-privileged users from loading a malicious OpenSSL engine.

Fix

Related Identifiers

CVE-2020-36164

Affected Products

Veritas Enterprise Vault

References · 3

• https://osv.dev/vulnerability/CVE-2020-36164 · Vendor Advisory
• https://veritas.com/content/support/en_US/security/VTS20-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36164 · Security Note