CVEvulnerability
CVE-2018-18652
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.
Affected configurations
• veritas netbackup appliance (< 3.1.2)
References
- http://www.securityfocus.com/bid/105737 Third Party Advisory, VDB Entry
- https://www.veritas.com/content/support/en_US/security/VTS18-003.html Vendor Advisory
- http://www.securityfocus.com/bid/105737 Third Party Advisory, VDB Entry
- https://www.veritas.com/content/support/en_US/security/VTS18-003.html Vendor Advisory