An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.

Cobalt Blog


Thoughts, perspectives, and industry commentary from the Cobalt team. Insights for security leaders, pentesters and developers — all in one place. Learn more about how the world of App- and InfoSec is changing every day.

Listed: