CVE-2023-28758

published 2023-03-23

CVE-2023-28758: An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command…

Priority P4 29 high 7.1 CVSS 3.1

AV L AC L PR L UI N S U C N I H A H

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
veritas	netbackup	< 8.3.0.2	8.3.0.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269