CVE-2022-42301 in NetBackup

Résumé

par MITRE • 03/10/2022

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: MITRE
• Réserver: 03/10/2022
• Divulgation: 03/10/2022
• Modérer: accepté
• Entrée: VDB-210139
• CPE: prêt
• CWE: CWE-611 (confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.00576
• KEV: non
• Activités: très faible
• Secteur: Insurance, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-42301
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-42301
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-42301/