CVE Database
/

CVE-2022-45461

Back to search

CVE-2022-45461

Published: Nov 17, 2022

Modified: Apr 29, 2025

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been explicitly added to the auth.conf file) to execute arbitrary commands as root.

VendorProductVersions

n/a

n/a

affected
n/a

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N

Attack Complexity

High

Attack Vector

Network

Availability

High

Confidentiality

High

Integrity

High

Privileges Required

Low

Scope

Unchanged

User Interaction

None

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now