In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
| Software | From | Fixed in |
|---|---|---|
| veritas / netbackup_appliance | - | 3.1.2 |
| veritas / netbackup | - | 8.1.2 |