CVE-2022-26778

Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration

Medium · published March 9, 2022

CVSS v3.1
5.3
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows user (who has sufficient privileges) to access a network file system that they were not authorized to access.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Published
2022-03-09T06:53Z
EPSS history
Timeline
  • 09 MAR 06:53Z
    Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration
    cvelistv5