PT-2016-7249 · Netapp · Netapp Plug-In For Symantec Netbackup

Published 2016-12-05 · Updated 2016-12-23 · CVE-2016-7171

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetApp Plug-in for Symantec NetBackup versions prior to 2.0.1

Description The issue arises from the use of a non-unique server certificate, which makes the system susceptible to impersonation.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2016-7171

Affected Products

Netapp Plug-In For Symantec Netbackup

References · 5

• https://kb.netapp.com/support/s/article/NTAP-20161129-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7171 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7171 · Vendor Advisory
• http://securityfocus.com/bid/94659 · Note
• http://securitytracker.com/id/1037391 · Note