CVE-2023-37237: High severity Veritas NetBackup Appliance vulnerability
Published Jun 29, 2023
·Updated
In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.
Affected Software
3 affected components
Veritas NetBackup Appliance<4.1.0.1
Veritas NetBackup Appliance=4.1.0.1-maintenance_release1
Veritas NetBackup Appliance=4.1.0.1-maintenance_release2
Event History
Jun 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this security issue in Veritas NetBackup Appliance?
The vulnerability ID of this security issue in Veritas NetBackup Appliance is CVE-2023-37237.
2
What is the severity level of CVE-2023-37237?
The severity level of CVE-2023-37237 is high (7.2).
3
How can an authenticated Admin exploit this vulnerability?
An authenticated Admin can exploit this vulnerability by bypassing shell restrictions and executing arbitrary operating system commands via SSH.
4
Which versions of Veritas NetBackup Appliance are affected by this vulnerability?
Versions up to and excluding 4.1.0.1 MR3 of Veritas NetBackup Appliance are affected by this vulnerability.
5
How can I fix the vulnerability in Veritas NetBackup Appliance?
To fix the vulnerability in Veritas NetBackup Appliance, upgrade to version 4.1.0.1 MR3 or later.