PT-2017-14080 · Netapp+1 · Altavault Ost Plug-In+1

Publicado 2017-11-17 · Atualizado 2017-12-04 · CVE-2017-15517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AltaVault OST Plug-in versions prior to 1.2.2

Description The issue may allow attackers to obtain sensitive information via unspecified vectors. Users are urged to change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

Recommendations For versions prior to 1.2.2, update to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-15517

Produtos afetados

Altavault Ost Plug-In

Veritas Netbackup

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-15517 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15517 · Nota de Segurança
• https://security.netapp.com/advisory/ntap-20171116-0001 · Aviso do Fabricante