CVE-2020-36168

An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration file, which does not exist. By default, on Windo...

CVE-2020-36168

CVE-2020-36168 affects Veritas Resiliency Platform 3.4 and 3.5 on Windows with the Managed Host addon. At startup, the OpenSSL library is loaded and may search for openssl.cnf; since the file may be absent, a low-privileged user can place a malicious openssl.cnf at C:\usr\local\ssl\openssl.cnf. T...