CVE-2023-40256

Summary

CVE-2023-40256 is a vulnerability affecting Veritas NetBackup Snapshot Manager versions prior to 10.2.0.1. A misconfiguration in the RabbitMQ service leads to inadequate client certificate validation, enabling untrusted clients to interact with it. The consequences of this flaw are the compromise of messages related to backup and restore jobs, potentially impacting their confidentiality, integrity, and availability. This issue is limited to the NetBackup Snapshot Manager feature and does not grant access to or deletion of backup snapshot data on the NetBackup primary servers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.