CVE-2021-27877: Veritas Backup Exec Agent Improper Authentication Vulnerability
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.
Other sources
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Veritas Backup Execto a version that resolves this vulnerability.Fixed in 21.2 - Configuration
Disable the SHA authentication scheme in the Veritas Backup Exec Agent configuration to prevent unauthorized access via the SHA authentication method.
Veritas Backup Exec Agent SHA authentication scheme = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27877?
CVE-2021-27877 has been classified with medium severity due to its potential for remote code execution.
How do I fix CVE-2021-27877?
To remediate CVE-2021-27877, upgrade Veritas Backup Exec to version 21.2 or a later version.
Who is affected by CVE-2021-27877?
CVE-2021-27877 affects users of Veritas Backup Exec versions prior to 21.2 that still utilize the SHA authentication scheme.
What kind of vulnerability is CVE-2021-27877?
CVE-2021-27877 is a remote code execution vulnerability related to outdated authentication support.
Is there a known exploit for CVE-2021-27877?
Yes, there are known exploits for CVE-2021-27877 that take advantage of the vulnerable SHA authentication scheme.