CVE-2023-28758: High severity netbackup enterprise server vulnerability
An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-28758?
CVE-2023-28758 is a vulnerability discovered in Veritas NetBackup before 8.3.0.2 that allows an unprivileged user to specify a log file path when executing a NetBackup command, potentially overwriting existing log files.
How does CVE-2023-28758 affect Veritas NetBackup?
CVE-2023-28758 affects Veritas NetBackup versions before 8.3.0.2, allowing an unprivileged user to compromise the integrity of log files.
What is the severity of CVE-2023-28758?
CVE-2023-28758 has a severity rating of 7.1 (high).
How can I fix CVE-2023-28758 in Veritas NetBackup?
To fix CVE-2023-28758, you should update Veritas NetBackup to version 8.3.0.2 or later.
Where can I find more information about CVE-2023-28758?
You can find more information about CVE-2023-28758 on the Veritas website at [https://www.veritas.com/content/support/en_US/security/VTS23-003](https://www.veritas.com/content/support/en_US/security/VTS23-003).