Description
Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.veritas.com/content/support/en_US/security/VTS20-003
Scores
CVSS v3
6.3
EPSS
0.0064
EPSS Percentile
46.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-863
Status
published
Products (1)
veritas/aptare
< 10.4
Published
May 14, 2020
Tracked Since
Feb 18, 2026