CVE-2019-9867 Information disclosure in n/a

High 7.2 Published Updated

An administrator can view the proxy server password in the Web Console, exposing sensitive credentials.

Exploited in the wild
Not known
Login needed
An administrator
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2019-9867?

CVE-2019-9867 is a high-severity vulnerability in n/a, published on 19 Mar 2019. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.

Weakness: CWE-522

Which versions are affected by CVE-2019-9867?

It affects 1 product.

Products include Veritas Netbackup Appliance.

How do I fix CVE-2019-9867?

No fix has been published for CVE-2019-9867 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-9867 being exploited?

There is no known exploitation of CVE-2019-9867 in the wild and no public exploit code.

Sources

Also known as GHSA-5vx8-83mx-4p57.

Is CVE-2019-9867 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free