CVE-2022-36997
28.07.2022, 01:15
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.
| Vendor | Product | Version |
|---|---|---|
| veritas | flex_appliance | 1.2 |
| veritas | flex_appliance | 1.3 |
| veritas | flex_appliance | 2.0 |
| veritas | flex_appliance | 2.0.1 |
| veritas | flex_appliance | 2.0.2 |
| veritas | flex_appliance | 2.1 |
| veritas | flex_scale | 1.3.1 |
| veritas | flex_scale | 2.1 |
| veritas | netbackup | 8.1.1 |
| veritas | netbackup | 8.1.2 |
| veritas | netbackup | 8.2 |
| veritas | netbackup | 8.3 |
| veritas | netbackup | 8.3.0.1 |
| veritas | netbackup | 8.3.0.2 |
| veritas | netbackup | 9.0 |
| veritas | netbackup | 9.0.0.1 |
| veritas | netbackup | 9.1 |
| veritas | netbackup | 9.1.0.1 |
| veritas | netbackup_appliance | 3.1.1 |
| veritas | netbackup_appliance | 3.1.2 |
| veritas | netbackup_appliance | 3.2 |
| veritas | netbackup_appliance | 4.0 |
| veritas | netbackup_appliance | 4.1 |
| veritas | netbackup_appliance | 3.2:maintenance_release1 |
| veritas | netbackup_appliance | 3.2:maintenance_release2 |
| veritas | netbackup_appliance | 3.2:maintenance_release3 |
| veritas | netbackup_appliance | 3.3.0.1:maintenance_release1 |
| veritas | netbackup_appliance | 3.3.0.1:maintenance_release2 |
| veritas | netbackup_appliance | 3.3.0.2:maintenance_release1 |
| veritas | netbackup_appliance | 3.3.0.2:maintenance_release2 |
| veritas | netbackup_appliance | 4.0.0.1:maintenance_release1 |
| veritas | netbackup_appliance | 4.0.0.1:maintenance_release2 |
| veritas | netbackup_appliance | 4.0.0.1:maintenance_release3 |
| veritas | netbackup_appliance | 4.1.0.1:maintenance_release1 |
| veritas | netbackup_appliance | 4.1.0.1:maintenance_release2 |
𝑥
= Vulnerable software versions