Patch available for Symantec Backup Exec
Tenable Network Security discovered a security flaw in software commonly used to backup important corporate data. After notifying Symantec of the problem, their engineers conducted a review of all effected products and have released a set of hotfixes. Tenable has also released a Nessus plugin which detects the missing patch.
This particular vulnerability effects enterprise networks which use the "Backup Exec" software to ensure their data is stored in a safe and central location. This also makes it convenient for an insider to attack one spot and obtain the data they are after.
Related Articles
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.