CVE-2024-33672

CVSS 3.1 Score 7.7 of 10 (high)

Details

Published Apr 26, 2024
Updated: Jul 3, 2024
CWE ID 427

Summary

CVE-2024-33672 is a newly disclosed vulnerability affecting Veritas NetBackup versions prior to 10.4. This issue revolves around the Multi-Threaded Agent component of NetBackup, which has been found to allow unauthorized file deletion on protected files. The vulnerability grants an attacker the ability to delete critical data, posing a significant risk to data integrity and availability. Veritas urges users to upgrade to the latest version of NetBackup as soon as possible to mitigate this threat. This vulnerability can be exploited remotely, making it particularly dangerous. Successful exploitation could lead to data loss and potential business disruption.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share