Password Exposure in Veritas System Recovery by Veritas
CVE-2022-26778

5.3MEDIUM

Key Information:

Vendor

Veritas

Status
System Recovery
Vendor
CVE Published:
9 March 2022

What is CVE-2022-26778?

Veritas System Recovery (VSR) versions 18 and 21 store network destination passwords within the Windows registry during backup configuration. This could potentially allow local Windows users with specific privileges to gain unauthorized access to sensitive network file systems, potentially leading to data breaches or misuse of information. It is essential for organizations using this software to understand the implications of this vulnerability and take appropriate measures to safeguard their data.

References

https://www.veritas.com/content/support/en_US/security/VT...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.