CVE-2022-26778 MEDIUM

CVE-2022-26778

Vendor N/A
Product n/a
Published March 9, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N

What the vulnerability does

01Description

Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows user (who has sufficient privileges) to access a network file system that they were not authorized to access.

Key dates

02Disclosure timeline

March 9, 2022 CVE published
August 3, 2024 Record updated