CVE-2024-28222

No fix known EPSS <1%CVSS 9.8

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

Published 2024-03-07 · CVE record · OSV

Products: veritas netbackup, veritas netbackup_appliance