medium5.9
CVE-2015-6551
Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administ…
Impact
Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veritas | Netbackup Appliance | Versions 1.1.0.1, 1.1.0.2, 1.2, 2.0, 2.0.1, 2.0.2 |
| Veritas | Netbackup | Versions 7.0, 7.0.1, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.0.4 |