Remote Information Disclosure in Veritas NetBackup Products

CVE-2022-36996

Summary

Veritas NetBackup products are affected by a vulnerability allowing an authenticated attacker with access to a NetBackup Client to remotely gather sensitive information. This includes details about any host recognized by a NetBackup Primary server, potentially leading to further access or exploitation of the affected network. The security flaw spans several versions of NetBackup, emphasizing the need for timely updates and appropriate security measures.

References