CVE Vulnerabilities

CVE-2022-36955

Published: Jul 27, 2022 | Modified: Aug 03, 2022
CVSS 3.x
8.4
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1.

Affected Software

Name Vendor Start Version End Version
Netbackup Veritas 8.0 (including) 8.1.2 (including)
Netbackup Veritas 8.3.0.0 (including) 8.3.0.2 (including)
Netbackup Veritas 8.2 (including) 8.2 (including)
Netbackup Veritas 9.0 (including) 9.0 (including)
Netbackup Veritas 9.1.0.0 (including) 9.1.0.0 (including)

References