CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.

• CWE-269

• https://www.veritas.com/content/support/en_US/security/VTS23-003Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS23-003Vendor Advisory

Published

Mar 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28750Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-28751Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-28753netconsd prior to v0.2 was vulnerable to an integer overflow…9.8
• CVE-2023-28754Deserialization of Untrusted Data vulnerability in Apache Sh…8.8
• CVE-2023-28755A ReDoS issue was discovered in the URI component through 0.…5.3
• CVE-2023-28756A ReDoS issue was discovered in the Time component through 0…5.3
• CVE-2023-28759An issue was discovered in Veritas NetBackup before 10.0 on …7.8
• CVE-2023-2876Sensitive Cookie Without 'HttpOnly' Flag vulnerability in AB…6.1
• CVE-2023-28760TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow una…7.5
• CVE-2023-28761In SAP NetWeaver Enterprise Portal - version 7.50, an unauth…6.5
• CVE-2023-28762SAP BusinessObjects Business Intelligence Platform - version…7.2
• CVE-2023-28763SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, …6.5