A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-295.
Summary
A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service. Exploiting this impacts the confidentiality and integrity of messages controlling the backup and restore jobs, and could result in the service becoming unavailable. This impacts only the jobs controlling the backup and restore activities, and does not allow access to (or deletion of) the backup snapshot data itself. This vulnerability is confined to the NetBackup Snapshot Manager feature and does not impact the RabbitMQ instance on the NetBackup primary servers.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:veritas:netbackup_snapshot_manager:*:*:*:*:*:*:*:* | up to 8.3.0.2 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:9.1.0.1:*:*:*:*:*:*:* | 9.1.0.1 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:10.0.0.1:-:*:*:*:*:*:* | 10.0.0.1 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:10.1:*:*:*:*:*:*:* | 10.1 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:10.1.1:-:*:*:*:*:*:* | 10.1.1 | Vulnerable | Veritas |
| cpe:2.3:a:veritas:netbackup_snapshot_manager:10.2:*:*:*:*:*:*:* | 10.2 | Vulnerable | Veritas |
- cpe:2.3:a:veritas:netbackup_snapshot_manager:*:*:*:*:*:*:*:* Versions up to 8.3.0.2 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:9.1.0.1:*:*:*:*:*:*:* Versions 9.1.0.1 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:10.0.0.1:-:*:*:*:*:*:* Versions 10.0.0.1 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:10.1.1:-:*:*:*:*:*:* Versions 10.1.1 Vulnerable ·Veritas
- cpe:2.3:a:veritas:netbackup_snapshot_manager:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Veritas
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-40256
- 2026-10-03 Alias added: GHSA-p3h6-32q9-xwh5
References
Sources
- CVE-2023-40256 · CVE Program
- CVE-2023-40256 · NVD
- FIRST EPSS
- GHSA-p3h6-32q9-xwh5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences