CVE-2017-8859
CriticalSummary
In Veritas NetBackup Appliance version 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.
Risk Assessment
This vulnerability allows unauthorized individuals to gain full control over the system, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to the latest version of the software to mitigate this vulnerability and implement appropriate authorization mechanisms.
Other vulnerabilities in Veritas NetBackup Appliance
See all- CVE-2016-7399Critical
In Veritas NetBackup Appliance versions 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x, a vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.
- CVE-2023-37237Medium
In Veritas NetBackup Appliance before version 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.
Original NVD description (English source)
In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.