CVE-2022-36955: High severity netbackup enterprise server vulnerability
In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-36955?
CVE-2022-36955 is a vulnerability in Veritas NetBackup that allows an attacker with unprivileged local access to escalate their privileges by sending specific commands.
Which versions of Veritas NetBackup are affected by CVE-2022-36955?
Versions 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 of Veritas NetBackup are affected by CVE-2022-36955.
What is the severity of CVE-2022-36955?
CVE-2022-36955 has a severity rating of 8.4, which is considered high.
How can an attacker exploit CVE-2022-36955?
An attacker with unprivileged local access to a NetBackup Client can exploit CVE-2022-36955 by sending specific commands to escalate their privileges.
Where can I find more information about CVE-2022-36955?
More information about CVE-2022-36955 can be found at the following link: [https://www.veritas.com/content/support/en_US/security/VTS22-008#Issue2](https://www.veritas.com/content/support/en_US/security/VTS22-008#Issue2)