PT-2022-26363 · Veritas · Veritas Netbackup

Published 2022-10-03 · Updated 2022-10-04 · CVE-2022-42308

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AC:L/AV:L/A:H/C:N/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.3

Description An issue was discovered that allows an attacker with local access to delete arbitrary files by leveraging a path traversal in the pbx exchange registration code.

Recommendations For Veritas NetBackup versions prior to 8.3, update to version 8.3 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-42308

Affected Products

Veritas Netbackup

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-42308 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42308 · Vendor Advisory
• https://veritas.com/content/support/en_US/security/VTS22-010#C1 · Vendor Advisory