VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 24, 2023· Updated Jun 17, 2026

CVE-2023-28818

CVE-2023-28818

Description

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors.

Affected products

5
  • Symantec/Aptare It Analytics
    cpe:2.3:a:veritas:aptare_it_analytics:*:*:*:*:*:*:*:*
    Range: <10.6.00
  • Symantec/Netbackup It Analytics3 versions
    cpe:2.3:a:veritas:netbackup_it_analytics:11.0.00:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:veritas:netbackup_it_analytics:11.0.00:*:*:*:*:*:*:*
    • cpe:2.3:a:veritas:netbackup_it_analytics:11.1.00:*:*:*:*:*:*:*
    • (no CPE)range: <11.2.0
  • Veritas/NetBackup IT Analyticsdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.