Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hcpj-7xxx-7pm4

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.

EPSS

Процентиль: 37%
0.00157
Низкий

7.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость программного средства для резервного копирования и восстановления данных Veritas NetBackup, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 37%
0.00157
Низкий

7.8 High

CVSS3

Дефекты

CWE-94