PT-2016-7249 · Netapp · Netapp Plug-In For Symantec Netbackup

Publicado 2016-12-05 · Atualizado 2016-12-23 · CVE-2016-7171

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetApp Plug-in for Symantec NetBackup versions prior to 2.0.1

Description The issue arises from the use of a non-unique server certificate, which makes the system susceptible to impersonation.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2016-7171

Produtos afetados

Netapp Plug-In For Symantec Netbackup

Referências · 5

• https://kb.netapp.com/support/s/article/NTAP-20161129-0001 · Aviso do Fabricante
• http://securityfocus.com/bid/94659 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7171 · Nota de Segurança
• http://securitytracker.com/id/1037391 · Nota
• https://osv.dev/vulnerability/CVE-2016-7171 · Aviso do Fabricante