NetApp Clustered Data ONTAP man-in-the-middle attack Vulnerability (CVE-2016-1563)

NetApp Clustered Data ONTAP man-in-the-middle attack Vulnerability (CVE-2016-1563)
NetApp Clustered Data ONTAP man-in-the-middle attack Vulnerability (CVE-2016-1563)

Release date:
Updated on:

Affected Systems:

NetApp Data ONTAP 8.3.1

Description:

CVE (CAN) ID: CVE-2016-1563

NetApp Data ONTAP is a Data management platform.

NetApp Clustered Data ONTAP 8.3.1 fails to correctly verify the TLS server's x.509 Certificate. Man-in-the-middle attackers can exploit this vulnerability to spoof the server and obtain sensitive information.

<* Source: vendor
*>

Suggestion:

Vendor patch:

NetApp
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://kb.netapp.com/support/index? Page = content & id = 9010064

This article permanently updates the link address: