CVE-2021-27877

Description

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-27877
• https://www.veritas.com/support/en_US/security/VTS21-001
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14615
• https://www.veritas.com/content/support/en_US/security/VTS21-001#issue1
• http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html