Unauthorized File Access in Veritas System Recovery by Veritas
CVE-2024-35204

Currently unrated

Key Information:

Vendor
Veritas
Status
Veritas System Recovery
Vendor
CVE Published:
14 May 2024

Summary

The vulnerability in Veritas System Recovery arises from improper permission settings for the System Recovery folder. This flaw allows users with low privileges to exploit file access and potentially execute unauthorized actions. Organizations using versions prior to 23.3_Hotfix should be aware of this risk and implement necessary precautions to mitigate the exposure.

References

https://www.veritas.com/support/en_US/security/VTS24-005

Timeline

  • Vulnerability published

.