Cybersecurity Alerts

Veritas Backup Exec Agent Improper Authentication Vulnerability

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-287

References

• https://www.veritas.com/support/en_US/security/VTS21-001
• https://nvd.nist.gov/vuln/detail/CVE-2021-27877