An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with ../ substrings, can occur.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Access | Veritas | * | 7.2.1 (including) |
| Netbackup | Veritas | * | 7.7.1 (including) |
| Netbackup_appliance | Veritas | * | 2.7.1 (including) |