PT-2017-18165
CVE-2017-8157
·
تاريخ النشر
2017-11-22
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OceanStor 5800 V3 versions V300R002C00 through V300R002C10
OceanStor 6900 V3 version V300R001C00
Description
The issue is related to an information leakage vulnerability. The products use TLS1.0 for encryption, which has known vulnerabilities. Attackers can exploit these vulnerabilities to decrypt data and obtain sensitive information.
Recommendations
For OceanStor 5800 V3 versions V300R002C00 through V300R002C10, consider upgrading to a version that uses a more secure encryption protocol.
For OceanStor 6900 V3 version V300R001C00, consider upgrading to a version that uses a more secure encryption protocol.
As a temporary workaround, consider disabling the use of TLS1.0 to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾