{ "schema_version": "1.4.0", "id": "GHSA-v3v3-mrmr-8g62", "modified": "2022-05-17T03:37:19Z", "published": "2022-05-17T03:37:19Z", "aliases": [ "CVE-2015-6551" ], "details": "Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6551" }, { "type": "WEB", "url": "https://www.veritas.com/content/support/en_US/security/VTS16-001.html" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1035704" } ], "database_specific": { "cwe_ids": [ "CWE-200" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2016-05-07T14:59:00Z" } }