CVE-2020-36165

An issue was discovered in Veritas Desktop and Laptop Option DLO before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create...

CVE-2020-36165

CVE-2020-36165 affects Veritas Desktop and Laptop Option (DLO) before 9.4. At startup, DLO loads the OpenSSL library from /ReleaseX64/ssl, which attempts to load /ReleaseX64/ssl/openssl.cnf that does not exist. A low-privilege user can create C:/ReleaseX64/ssl/openssl.cnf to load a malicious Open...

PT-2021-11945

Name of the Vulnerable Software and Affected Versions: Veritas Desktop and Laptop Option DLO versions prior to 9.4 Description: An issue in Veritas Desktop and Laptop Option DLO allows a low-privileged user to create a malicious configuration file that can load a malicious OpenSSL engine, resulti...

CVE-2020-36165: Undefined Security Weakness

An issue was discovered in Veritas Desktop and Laptop Option DLO before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

PT-2021-11939

Name of the Vulnerable Software and Affected Versions: Veritas Desktop and Laptop Option DLO versions prior to 9.5 Description: The issue allows disclosure of operational information on the backup processing status through a URL that does not require authentication. Recommendations: For versions...

CVE-2020-36159: Undefined Security Weakness

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...