CVE-2021-27877
KEV · RansomwareVeritas Backup Exec Agent Improper Authentication Vulnerability
View CVE record →- Vendor / Project
- Veritas
- Product
- Backup Exec Agent
- Date added
- Apr 7, 2023
- Due date
- Apr 28, 2023
- Known ransomware use
- Known
- CWEs
- CWE-287
Description
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
Required action
Apply updates per vendor instructions.