PT-2024-25429 · Veritas · Veritas Backup Exec

Published 2024-04-26 · Updated 2024-08-27 · CVE-2024-33671

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AC:L/AV:L/A:H/C:N/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Veritas Backup Exec versions prior to 22.2 HotFix 917391

Description An issue was discovered in the Veritas Backup Exec software, where the Backup Exec Deduplication Multi-threaded Streaming Agent can be used to perform arbitrary file deletion on protected files.

Recommendations For versions prior to 22.2 HotFix 917391, update to version 22.2 HotFix 917391 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-33671

Affected Products

Veritas Backup Exec

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-33671 · Security Note
• https://osv.dev/vulnerability/CVE-2024-33671 · Vendor Advisory
• https://veritas.com/support/en_US/security/VTS24-002#H1 · Vendor Advisory