CVE-2017-6400
HighSummary
An issue was discovered in Veritas NetBackup before version 7.7.2 and NetBackup Appliance before version 2.7.2, allowing privileged command execution on the NetBackup Server and Client on the local system.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system and potential takeover, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to the latest version of Veritas NetBackup and NetBackup Appliance to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Veritas NetBackup, Veritas NetBackup Appliance
See all- CVE-2017-6407High
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows privileged remote command execution on NetBackup Server and Client.
- CVE-2017-6406High
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows arbitrary privileged command execution using whitelist directory escape with '../' substrings.
Original NVD description (English source)
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system).