CVE-2013-4677: Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read a...

Security readout for executives and security teams

Older Symantec Backup Exec versions stored backup data files with overly broad local permissions. A local user could read sensitive backup contents or alter files in a way that changes restore results. This is most relevant where shared systems, backup operators, or untrusted local accounts can access Backup Exec storage. Exposure is likely limited to organizations still running the named legacy Backup Exec versions with local users or processes able to reach backup data file locations. The provided source bundle does not identify specific CPEs or broader affected products. Treat this as a legacy backup-platform risk with confidentiality and recovery-integrity implications. It is not supported here as internet-exploited, but backups often contain sensitive data and underpin disaster recovery, so remaining affected deployments should be remediated or retired promptly. Mitigation focus: Upgrade beyond affected versions: Backup Exec 2010 R3 SP3 or 2012 SP2.; Review the Symantec advisory for exact remediation and support status.; Audit backup data file permissions against vendor guidance..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.