CyberRota Analysis
AI-GeneratedAn authenticated, low-privileged user with access to the NetBackup Flex OS management shell can exploit a vulnerability to bypass cryptographic signature verification, allowing them to execute privileged support commands. This exploitation results in an unrestricted root shell, granting full control over the Flex appliance host and all hosted containers, thereby compromising confidentiality, integrity, and availability. Organizations using NetBackup Flex should prioritize addressing this vulnerability to mitigate the risk of severe security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted root shell with full control over the Flex appliance host and all hosted containers, completely compromising confidentiality, integrity, and availability.