OpenCVE

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Veritas	Access Appliance Netbackup Flex Scale Appliance

Configuration 1 [-]

OR	cpe:2.3:a:veritas:access_appliance::::::::
	cpe:2.3:a:veritas:netbackup_flex_scale_appliance::::::::

No data.

References

Link	Providers
https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-12-04T00:00:00

Updated: 2024-08-03T14:31:46.363Z

Reserved: 2022-12-04T00:00:00

Link: CVE-2022-46414

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-12-04T05:15:10.243

Modified: 2024-11-21T07:30:33.527

Link: CVE-2022-46414

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:veritas:access_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "4310B4AB-094A-46A6-AC94-80D21302A2A0", "versionEndIncluding": "8.0.100", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup_flex_scale_appliance:*:*:*:*:*:*:*:*", "matchCriteriaId": "922C4AFC-EE51-470D-8DB1-0A4BC5FF3BEA", "versionEndIncluding": "3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Veritas NetBackup Flex Scale hasta 3.0 y Access Appliance hasta 8.0.100. La ejecuci\u00f3n de comandos remotos no autenticados puede ocurrir a trav\u00e9s del portal de administraci\u00f3n."}], "id": "CVE-2022-46414", "lastModified": "2024-11-21T07:30:33.527", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-04T05:15:10.243", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}