CVE-2019-14418

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to overwrite any file in the VRP virtual machine. A malicious VRP user could use this to replace existing files to take control of the VRP virtual machine.

• CWE-22

• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/39Broken Link, Mailing List, Third Party Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue1Vendor Advisory
• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/39Broken Link, Mailing List, Third Party Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue1Vendor Advisory

Published

Jul 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14412Maketext in cPanel before 78.0.2 allows format-string inject…
• CVE-2019-14413cPanel before 78.0.2 allows certain file-write operations as…
• CVE-2019-14414In cPanel before 78.0.2, a Userdata cache temporary file can…
• CVE-2019-14415An issue was discovered in Veritas Resiliency Platform (VRP)…4.8
• CVE-2019-14416An issue was discovered in Veritas Resiliency Platform (VRP)…7.2
• CVE-2019-14417An issue was discovered in Veritas Resiliency Platform (VRP)…7.2
• CVE-2019-1442A security feature bypass vulnerability exists when Microsof…5.5
• CVE-2019-14422An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncm…
• CVE-2019-14423A Remote Code Execution (RCE) issue in the addon CUx-Daemon …8.8
• CVE-2019-14424A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1…6.5
• CVE-2019-14427XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding…
• CVE-2019-1443An information disclosure vulnerability exists in Microsoft …6.5