Directory Traversal Vulnerability in Veritas InfoScale Operations Manager

CVE-2022-26484

What is CVE-2022-26484?

A vulnerability exists in Veritas InfoScale Operations Manager that permits a remote authenticated administrator to exploit a failure in input sanitization within the web server. By manipulating the resource name in GET requests, an attacker can gain access to arbitrary files on the system. This flaw may expose sensitive application source code, configuration files, and critical system files, potentially leading to significant data breaches and unauthorized access to system resources. For detailed insights and mitigative measures, refer to the official Veritas security advisory.

References