Vulnerability in Symantec Backup Exec
CVE-2013-4677
Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
Affected products
- Symantec Backup_exec — versions 2010, 2010_r3, 2012
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
- secure@symantec.com (x_refsource_OSVDB, vdb-entry)
- secure@symantec.com (vdb-entry, x_refsource_BID)