Command Injection Vulnerability in Veritas InfoScale Operations Manager
CVE-2023-32568

7.2HIGH

Key Information:

Vendor
Veritas
Status
Infoscale Operations Manager
Vendor
CVE Published:
10 May 2023

Summary

A command injection vulnerability exists in Veritas InfoScale Operations Manager prior to version 7.4.2.800 and 8.x before 8.0.410, due to insufficient validation of user-supplied data. This weakness enables attackers with administrative access to inject malicious input into OS commands and internal binaries. As a result, they could potentially read sensitive information, modify server configurations, and even delete critical data, thereby compromising system integrity.

References

https://www.veritas.com/content/support/en_US/security/VT...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.