The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been explicitly added to the auth.conf file) to execute arbitrary commands as root.
2022-11-17T08:15:09.157
2025-04-29T14:15:27.357
Modified
CVSSv3.1: 7.5 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | veritas | netbackup | ≤ 10.1 | Yes |
Operating System | linux | linux_kernel | - | No |
Operating System | opengroup | unix | - | No |