CVE-2023-28818: Medium severity veritas aptare it analytics vulnerability
An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-28818.
What is the severity of CVE-2023-28818?
The severity of CVE-2023-28818 is medium with a score of 5.3.
Which software versions are affected by CVE-2023-28818?
Veritas Aptare It Analytics up to version 10.6.00 and Veritas NetBackup IT Analytics versions 11.0.00 and 11.1.00 are affected by CVE-2023-28818.
How can a malicious actor exploit CVE-2023-28818?
A malicious actor can exploit CVE-2023-28818 by installing rogue Collector executable files (aptare.jar or upgr...).
Is there a reference for more information about CVE-2023-28818?
Yes, you can find more information about CVE-2023-28818 at the following link: https://www.veritas.com/content/support/en_US/security/VTS23-002