CVE-2016-1563 Information

Description

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

Reference

https://kb.netapp.com/support/index?page=content&id=9010064 https://security.netapp.com/advisory/ntap-20160310-0002/

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

NONE

Base Severity

6.8