CVE-2020-36164

An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file which does not exist at the following locations in both the System drive typically C:\ and the product's...

CVE-2020-36164

Veritas Enterprise Vault (up to v14.0) is affected by CVE-2020-36164. On startup, the product loads the OpenSSL library, which then attempts to load a non-existent openssl.cnf from either C:\Isode\etc\ssl\openssl.cnf (SMTP Server) or C:\user\ssl\openssl.cnf (other components). A low-privilege use...