CVE-2023-37237

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary…

Medium · published June 29, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:N/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.2th percentile
Published
2023-06-29T00:00Z
EPSS history
Timeline
  • 29 JUN 00:00Z
    In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary…
    cvelistv5