CVE:CVE-2022-36985
CNNVD:CNNVD-202207-2577
Veritas NetBackup是美国Veritas公司的一个应用于为企业环境的提供备份、恢复功能的存储服务。该软件支持对勒索软件的检测和对元数据、虚拟环境等环境数据的备份保护。
Veritas NetBackup存在安全漏洞。攻击者利用该漏洞提升权限。以下产品及版本受到影响：8.1.x版本至8.1.2版本、8.2版本、8.3.x版本至8.3.0.2版本、9.x版本至9.0.0.1版本、9.1.x版本至9.1.0.1版本。
solution:Upgrade veritas flex_appliance to a higher version than 1.2,1.3,2.0,2.0.1,2.0.2,2.1,and avoid the version 1.2,1.3,2.0,2.0.1,2.0.2,2.1; Upgrade veritas flex_scale to a higher version than 1.3.1,2.1,and avoid the version 1.3.1,2.1; Upgrade veritas netbackup to a higher version than 8.1.1,8.1.2,8.2,8.3,8.3.0.1,8.3.0.2,9.0,9.0.0.1,9.1,9.1.0.1,and avoid the version 8.1.1,8.1.2,8.2,8.3,8.3.0.1,8.3.0.2,9.0,9.0.0.1,9.1,9.1.0.1; Upgrade veritas netbackup_appliance to a higher version than 3.1.1,3.1.2,3.2,4.0,4.1,3.2:maintenance_release1,3.2:maintenance_release2,3.2:maintenance_release3,3.3.0.1:maintenance_release1,3.3.0.1:maintenance_release2,3.3.0.2:maintenance_release1,3.3.0.2:maintenance_release2,4.0.0.1:maintenance_release1,4.0.0.1:maintenance_release2,4.0.0.1:maintenance_release3,4.1.0.1:maintenance_release1,4.1.0.1:maintenance_release2,and avoid the version 3.1.1,3.1.2,3.2,4.0,4.1,3.2:maintenance_release1,3.2:maintenance_release2,3.2:maintenance_release3,3.3.0.1:maintenance_release1,3.3.0.1:maintenance_release2,3.3.0.2:maintenance_release1,3.3.0.2:maintenance_release2,4.0.0.1:maintenance_release1,4.0.0.1:maintenance_release2,4.0.0.1:maintenance_release3,4.1.0.1:maintenance_release1,4.1.0.1:maintenance_release2