PT-2017-16660 · Riverbed · Riverbed Rios

Publicado 2017-04-04 · Atualizado 2017-05-24 · CVE-2017-5670

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Riverbed RiOS versions prior to 9.6.1

Description The issue allows physically proximate attackers to obtain sensitive information by reading raw disk blocks because the secure vault is deleted using the rm program instead of a secure deletion method like shred or srm.

Recommendations For versions prior to 9.6.1, update to version 9.6.1 or later to ensure secure deletion of sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-5670

Produtos afetados

Riverbed Rios

Referências · 6

• https://supportkb.riverbed.com/support/index?page=content&id=S30065 · Aviso do Fabricante
• http://securityfocus.com/bid/96175 · Nota
• http://seclists.org/fulldisclosure/2017/Feb/25 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5670 · Nota de Segurança
• https://sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670 · Nota
• https://osv.dev/vulnerability/CVE-2017-5670 · Aviso do Fabricante