Arbitrary File Read Vulnerability in Veritas NetBackup Products

CVE-2022-36994

Summary

A vulnerability exists in Veritas NetBackup that allows an attacker with authenticated access to a NetBackup Client to arbitrarily read files from a NetBackup Primary server. This poses a significant risk as it may expose sensitive information and compromise the integrity of data managed by the affected NetBackup products. It is crucial for organizations using these versions to assess their exposure and apply the necessary updates to mitigate this security concern.

References