Description
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
Advisories 2
- WID-SEC-2024-3479 Veritas Enterprise Vault: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 11, 2024
- NCSC-2024-0458 Kwetsbaarheden ontdekt in Veritas Enterprise Vault NCSC-NL (Netherlands) · Nov 25, 2024