CVE-2022-26484

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via Directory Traversal. By manipulating the resource name in GET requests referring to files with absolute paths, it is possible to access arbitrary files stored on the filesystem, including application source code, configuration files, and critical system files.

• CWE-22

• https://www.veritas.com/content/support/en_US/security/VTS22-002Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS22-002Patch, Vendor Advisory

Published

Mar 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26477The Security Team noticed that the termination condition of …7.5
• CVE-2022-26479An issue was discovered in Poly EagleEye Director II before …9.8
• CVE-2022-2648A vulnerability was found in SourceCodester Multi Language H…9.8
• CVE-2022-26481An issue was discovered in Poly Studio before 3.7.0. Command…8.8
• CVE-2022-26482An issue was discovered in Poly EagleEye Director II before …7.2
• CVE-2022-26483An issue was discovered in Veritas InfoScale Operations Mana…4.8
• CVE-2022-26485Removing an XSLT parameter during processing could have lead…8.8
• CVE-2022-26486An unexpected message in the WebGPU IPC framework could lead…9.6
• CVE-2022-26487Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-26488In Python before 3.10.3 on Windows, local users can gain pri…7
• CVE-2022-26490st21nfca_connectivity_event_received in drivers/nfc/st21nfca…7.8
• CVE-2022-26491An issue was discovered in Pidgin before 2.14.9. A remote at…5.9