CVE-2023-37237

Опубликовано: 29 июн. 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 7.2

EPSS Низкий

Описание

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

Ссылки

https://www.veritas.com/content/support/en_US/security/VTS23-004
Vendor Advisory
https://www.veritas.com/content/support/en_US/security/VTS23-004
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:veritas:netbackup_appliance:*:*:*:*:*:*:*:*

Версия до 4.1.0.1 (исключая)

cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:*

cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00103

Низкий

6.5 Medium

CVSS3

7.2 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

GHSA-h4ch-2gpx-6992

CVSS3: 6.5

github

больше 2 лет назад

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

EPSS

Процентиль: 29%

0.00103

Низкий

6.5 Medium

CVSS3

7.2 High

CVSS3

Дефекты

CWE-732