CVE-2022-42303: SQL Injection
Published Oct 3, 2022
·Updated
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.
Affected Software
1 affected component
Veritas NetBackup<=10.0
Remediation
Event History
Oct 3, 2022
CVE Published
via MITRE·02:48 PM
Data Sourced
via MITRE·02:48 PM
DescriptionSeverity
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2022-42303.
2
What is the severity of CVE-2022-42303?
The severity of CVE-2022-42303 is critical, with a CVSS score of 9.8.
3
What is the affected software for CVE-2022-42303?
The affected software for CVE-2022-42303 is Veritas NetBackup version up to and including 10.0.
4
How does CVE-2022-42303 impact the NetBackup Primary server?
CVE-2022-42303 exposes the NetBackup Primary server to a second-order SQL Injection attack through the NBFSMCLIENT service.
5
Is there a fix available for CVE-2022-42303?
Yes, Veritas has released a security advisory with fixes and mitigations for CVE-2022-42303. Please refer to their official documentation for more details.