Remote Command Execution in Veritas NetBackup by Authenticated Users

CVE-2022-36989

Summary

A security flaw exists in Veritas NetBackup products, allowing attackers with authenticated access to execute arbitrary commands on the NetBackup Primary server. This vulnerability affects various versions, enabling potential misuse of system functionalities and data exposure. Organizations utilizing affected versions should take immediate action to mitigate the risk, ensure proper access controls, and apply necessary security updates.

References