CVE-2016-5711: Critical severity NetApp Virtual Storage Console for VMware vSphere vulnerability
Published Feb 7, 2017
·Updated
NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
Affected Software
1 affected component
NetApp Virtual Storage Console for VMware vSphere<=6.2
Remediation
Patch Available
Event History
Feb 7, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:59 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5711?
CVE-2016-5711 is classified as a medium severity vulnerability due to the potential for man-in-the-middle attacks.
2
How do I fix CVE-2016-5711?
To mitigate CVE-2016-5711, upgrade to NetApp Virtual Storage Console for VMware vSphere version 6.2.1 or later.
3
What type of attack does CVE-2016-5711 enable?
CVE-2016-5711 allows remote attackers to perform man-in-the-middle attacks.
4
Which versions of NetApp Virtual Storage Console are affected by CVE-2016-5711?
CVE-2016-5711 affects NetApp Virtual Storage Console for VMware vSphere versions prior to 6.2.1.
5
Is there a direct impact on data confidentiality due to CVE-2016-5711?
Yes, the man-in-the-middle vulnerability in CVE-2016-5711 can compromise data confidentiality during transmission.