Vulnerability CVE-2018-18652
Published: 2018-10-25   Modified: 2018-10-26

Description:
A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:S/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9/10
10/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Veritas -> Netbackup appliance 

 References:
http://www.securityfocus.com/bid/105737
https://www.veritas.com/content/support/en_US/security/VTS18-003.html
Copyright 2024, cxsecurity.com

 

Back to Top