CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Input Validation
Summary: an issue was discovered in veritas resiliency platform (vrp) before 3.4 hf1. an arbitrary command execution vulnerability allows a malicious vrp user to execute commands with root privilege within the vrp virtual machine, related to resiliency plans and custom script functionality.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-07-29
Last Modified Date: 2019-10-09