Vulnerabilities > CVE-2018-18652 - Unspecified vulnerability in Veritas Netbackup Appliance

CVSS 9.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

veritas

critical

NVD

Published: 2018-10-25

Updated: 2020-08-24

Summary

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.

Vulnerable Configurations

Part	Description	Count
Application	Veritas Veritas Netbackup Appliance 1.1.0.1 Veritas Netbackup Appliance 1.1.0.2 Veritas Netbackup Appliance 1.2 Veritas Netbackup Appliance 2.0 Veritas Netbackup Appliance 2.0.1 Veritas Netbackup Appliance 2.0.2 Veritas Netbackup Appliance 2.0.3 Veritas Netbackup Appliance 2.5 Veritas Netbackup Appliance 2.5.1 Veritas Netbackup Appliance 2.5.2 Veritas Netbackup Appliance 2.5.3 Veritas Netbackup Appliance 2.6 Veritas Netbackup Appliance 2.6.0.2 Veritas Netbackup Appliance 2.6.0.3 Veritas Netbackup Appliance 2.6.0.4 Veritas Netbackup Appliance 2.6.1 Veritas Netbackup Appliance 2.6.1.1 Veritas Netbackup Appliance 2.6.1.2 Veritas Netbackup Appliance 2.7.1 Veritas Netbackup Appliance 2.7.2 Veritas Netbackup Appliance 2.7.3 Veritas Netbackup Appliance 3.1.1 Veritas Netbackup Appliance 3.1.2	23

Summary

Vulnerable Configurations

References