Description
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
References
- VU#407641 third-party-advisory
- 16470 third-party-advisory
- 16464 third-party-advisory
- 1014713 vdb-entry
- http://www.legato.com/support/websupport/product_alerts/081605_NW_token_authentication.htm
- 14582 vdb-entry
- legato-token-gain-privileges(21892) vdb-entry
- 101886 vendor-advisory
- 18801 vdb-entry