Horizon Alert
Summary of the vulnerability and why it matters
A vulnerability in Veritas Backup Exec Agent's SHA authentication scheme could allow an attacker to gain unauthorized access and execute privileged commands remotely. This flaw exists because the authentication scheme, though no longer used in current versions, had not been fully disabled. The potential business impact includes unauthorized access to sensitive data and system compromise.
- Vulnerable backup agent authentication
- Remote unauthorized access and command execution
- Data compromise and system impact
Attack Path
How an attacker could exploit the issue
An issue in Veritas Backup Exec allows an attacker to remotely access an Agent and execute privileged commands. This is possible because the system supports an older SHA authentication scheme that had not yet been disabled. The attacker can exploit this scheme to gain unauthorized access.
- Exposed Agent
- Attacker gains access
- Unauthorized commands executed
Live Threat
Current exploitation, exposure, and threat context
This vulnerability allows an attacker to gain unauthorized access to a Veritas Backup Exec Agent and execute privileged commands. The exploit can be performed remotely, requiring no user interaction. Successful exploitation could lead to significant data compromise and system control.
- Attackers with basic technical skills.
- No prior access or conditions needed.
- High business risk, requires urgent attention.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
An issue exists within Veritas Backup Exec versions prior to 21.2 that could allow an attacker to gain unauthorized access and execute privileged commands. This vulnerability is related to an older SHA authentication scheme that had not been disabled. Organizations are advised to take specific actions to address this risk.
- Identify all Veritas Backup Exec assets.
- Reduce exposure by disabling the authentication scheme.
- Apply vendor fixes, verify remediation, and monitor for issues.
