Veritas InfoScale Operations Manager SQL Injection Vulnerability Allowing Privilege Escalation

A SQL injection vulnerability has been identified in Veritas InfoScale Operations Manager (IOM) versions prior to 9.1.3. This vulnerability allows remote attackers to escalate privileges by gaining unauthorized access to the underlying database without authentication.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate or extract data, potentially leading to further privilege escalation or exploitation of additional vulnerabilities.

Remediation

Affected users are advised to upgrade to Veritas InfoScale Operations Manager version 9.1.3 or later. Instructions for upgrading managed hosts to version 9.0 are available in the Arctera InfoScale Operations Manager 9.0 Installation and Configuration Guide.