CVE-2013-4677

Published Aug 5, 2013

Last updated 11 years ago

Overview

Description: Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.
Source: secure@symantec.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 6.4
Exploitability score: 3.1
Vector string: AV:L/AC:L/Au:S/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-264

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:2010:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "006EB76F-8F6B-4D19-81AB-B9133CBC1F47"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:2010_r3:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD144D8C-99FA-44DC-949D-DF938AC3C6E8"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:2010_r3:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ADFAEEFA-E438-4611-A42E-A70C8F4D3F68"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:2012:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "632557AF-509E-4FF8-B0CC-A44ABC56645B"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:2012:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DBDF5A56-FE35-49C8-A94B-FE120D2B714B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References