CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for…

published May 7, 2016

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.6th percentile
Published
2016-05-07T14:00Z
EPSS history
Timeline
  • 07 MAY 14:00Z
    Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for…
    cvelistv5