CVE-2023-37237

Summary

CVE-2023-37237 is a vulnerability affecting the Veritas NetBackup Appliance before version 4.1.0.1 MR3. This issue permits authenticated Admin users to bypass shell restrictions and execute arbitrary operating system commands via SSH, due to insecure permissions. This vulnerability poses a significant risk, as an attacker could potentially gain unauthorized access and control over the system, leading to data theft or unauthorized modification. It is recommended that users of affected versions upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.