PT-2017-14080 · Netapp+1 · Altavault Ost Plug-In+1

Published 2017-11-17 · Updated 2017-12-04 · CVE-2017-15517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AltaVault OST Plug-in versions prior to 1.2.2

Description The issue may allow attackers to obtain sensitive information via unspecified vectors. Users are urged to change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

Recommendations For versions prior to 1.2.2, update to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-15517

Affected Products

Altavault Ost Plug-In

Veritas Netbackup

References · 3

• https://osv.dev/vulnerability/CVE-2017-15517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15517 · Security Note
• https://security.netapp.com/advisory/ntap-20171116-0001 · Vendor Advisory