CVE-2024-34404

A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Appliance before 5.4

Medium · published May 3, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Appliance before 5.4. By design, only the cloud administrator should be able to disable the retention lock of Governance mode images. This vulnerability allowed a NetBackup administrator to modify the expiration of backups under Governance mode (which could cause premature deletion).

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Published
2024-05-03T00:00Z
EPSS history
Timeline
  • 03 MAY 00:00Z
    A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Appliance before 5.4
    cvelistv5