Unencrypted Administration-Console Traffic Vulnerability in Veritas NetBackup

Unencrypted Administration-Console Traffic Vulnerability in Veritas NetBackup

CVE-2015-6551 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets.

Learn more about our Cis Benchmark Audit For Microsoft Exchange Server.