CVE-2022-36991

No fix known EPSS <1%CVSS 8.1

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server.

Published 2022-07-28 · CVE record · OSV

Products: veritas flex_appliance, veritas flex_scale, veritas netbackup, veritas netbackup_appliance