CVE-2020-5684

iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate...

CVE-2020-5684

CVE-2020-5684 affects NEC Storage Manager/Storage Manager Express: iSM client versions from 5.1 up to (but not including) 12.1 do not verify the server certificate, enabling MITM eavesdropping or modification via a crafted certificate. Remediation per JVN/Red Hat: update to iSM Client 12.1+ and N...