CVEvulnerability

CVE-2022-36985

7.8 HIGH Published 2022-07-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.

Affected configurations

• veritas flex appliance 1.2 • veritas flex appliance 1.3 • veritas flex appliance 2.0 • veritas flex appliance 2.0.1 • veritas flex appliance 2.0.2 • veritas flex appliance 2.1 • veritas flex scale 1.3.1 • veritas flex scale 2.1 • veritas netbackup 8.1.1 • veritas netbackup 8.1.2 • veritas netbackup 8.2 • veritas netbackup 8.3 • veritas netbackup 8.3.0.1 • veritas netbackup 8.3.0.2 • veritas netbackup 9.0 • veritas netbackup 9.0.0.1 • veritas netbackup 9.1 • veritas netbackup 9.1.0.1 • veritas netbackup appliance 3.1.1 • veritas netbackup appliance 3.1.2 • veritas netbackup appliance 3.2 • veritas netbackup appliance 4.0 • veritas netbackup appliance 4.1 • veritas netbackup appliance 3.3.0.1 • veritas netbackup appliance 3.3.0.2 • veritas netbackup appliance 4.0.0.1 • veritas netbackup appliance 4.1.0.1

References