CVE-2020-36162

An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which does not exist. By default, on Windows systems users can create directories under :\...

CVE-2020-36162

Veritas CloudPoint (Windows) prior to 8.3.0.1+hotfix is affected. The CloudPoint Windows Agent loads OpenSSL, which attempts to read a non-existent \usr\local\ssl\openssl.cnf. An attacker with low privileges on Windows can create a drive:\usr\local\ssl\openssl.cnf to load a malicious OpenSSL engi...