CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows

High · published March 23, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Published
2023-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    An issue was discovered in Veritas NetBackup before 10.0 on Windows
    cvelistv5