CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2

High · published March 23, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:N/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Published
2023-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    An issue was discovered in Veritas NetBackup before 8.3.0.2
    cvelistv5