CVE-2022-36949

In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 CRITICAL
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
mitreCNA
9.3 CRITICAL
LOCAL
LOW
NONE
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
veritasnetbackup
8.0 ≤
𝑥
< 8.3.0.2
veritasnetbackup
9.0
veritasnetbackup
9.1.0.0
𝑥
= Vulnerable software versions
References
https://www.veritas.com/content/support/en_US/security/VTS22-009#Issue5
https://www.veritas.com/content/support/en_US/security/VTS22-009#Issue5