CVE-2019-14416

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-29 · updated 2026-06-17

Description

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within the VRP virtual machine, related to resiliency plans and custom script functionality.

Affected products

Veritas Resiliency Platform: before 3.3.2; 3.3.2 — fixed in 3.3.2

How to fix

Upgrade to a fixed version: Veritas Resiliency Platform 3.3.2. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
http://seclists.org/fulldisclosure/2019/Jul/39
https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue3
http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
http://seclists.org/fulldisclosure/2019/Jul/39
https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue3

Get alerted when CVE-2019-14416 or the next vulnerability affects your stack