CVE-2022-36952: XSS
In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-36952?
CVE-2022-36952 is a vulnerability in Veritas NetBackup OpsCenter where a hard-coded credential exists that could be used to exploit the VxSS subsystem.
What is the severity of CVE-2022-36952?
CVE-2022-36952 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2022-36952?
CVE-2022-36952 affects Veritas NetBackup OpsCenter 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
How can CVE-2022-36952 be exploited?
CVE-2022-36952 can be exploited by using the hard-coded credential to gain unauthorized access to the VxSS subsystem.
Is there a fix for CVE-2022-36952?
Veritas has released patches to address CVE-2022-36952. Please refer to the vendor's security advisory for the appropriate patch.