CVE-2017-5670

2017-04-0416:00:00

mitre

www.cve.org

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.

References

seclists.org/fulldisclosure/2017/Feb/25

www.securityfocus.com/bid/96175

supportkb.riverbed.com/support/index?page=content&id=S30065

sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/