Veritas NetBackup Appliance Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	107567
Class:	Origin Validation Error
CVE:	CVE-2019-9867 CVE-2019-9868
Remote:	Yes
Local:	No
Published:	Mar 18 2019 12:00AM
Updated:	Mar 18 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Veritas NetBackup Appliance 3.1.2 Veritas NetBackup Appliance 3.1.1 Veritas NetBackup Appliance 2.7.3 Veritas NetBackup Appliance 3.1 Veritas NetBackup Appliance 3.0
Not Vulnerable:

Veritas NetBackup Appliance Multiple Information Disclosure Vulnerabilities

Veritas NetBackup Appliance is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to obtain sensitive information that may aid in further attacks.

NetBackup Appliance 3.1.2, 3.1.1, 3.1, 3.0, and 2.7.3 are vulnerable.

Veritas NetBackup Appliance Multiple Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Veritas NetBackup Appliance Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Veritas NetBackup Appliance Multiple Information Disclosure Vulnerabilities

References:

• Preventing passwords from appearing in the NetBackup Appliance Web Console (Veritas)
  
• Veritas Homepage (Veritas )
  
• VTS19-001: Multiple Vulnerabilities in NetBackup Appliance (Veritas)