Is netbackup master server affected by CVE-2022-42889?

[kennylo]

Is netbackup master server affected by CVE-2022-42889? Thanks. 

Master Server Version 9.1.0.1 

CVE-2022-42889

• https://www.rapid7.com/blog/post/2022/10/17/cve-2022-42889-keep-calm-and-stop-saying-4shell/
• https://www.bleepingcomputer.com/news/security/apache-commons-text-rce-flaw-keep-calm-and-patch-away...

[Nicolai]

hi @kennylo 

See : https://www.veritas.com/content/support/en_US/security

and 

https://www.cvedetails.com/vulnerability-list/vendor_id-1884/product_id-4116/Veritas-Netbackup.html

[Hamza_H]

Based on what @Nicolai shared (thank you for the helpful links) it looks like only data insight is affected by this CVE.

so netbackup is not affected (yet).

[kennylo]

Thanks both.