Medium severity · published Mar 24, 2023
CVE-2023-28818
An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aptare IT Analytics · Veritas
before 10.6.00 · source: NVD
NI
Netbackup IT Analytics · Veritas
11.0.00; 11.1.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-28818
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-28818
Vendor Advisory
https://www.veritas.com/content/support/en_US/security/VTS23-002
More from Aptare IT Analytics
8.8
CVE-2020-36161
An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3