CVE-2017-5670

2017-04-0416:00:00

mitre

www.cve.org

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

45.7%

JSON

Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.

References

seclists.org/fulldisclosure/2017/Feb/25

www.securityfocus.com/bid/96175

supportkb.riverbed.com/support/index?page=content&id=S30065

sysdream.com/news/lab/2017-02-15-riverbed-rios-insecure-cryptographic-storage-cve-2017-5670/