Cisco HyperFlex Static SSL Key Vulnerability

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific encryption key for the cluster. A successful exploit could allow the attacker to perform a man-in-the-middle attack against other nodes in the cluster.

N/A

密钥管理错误

Cisco HyperFlex Software 加密问题漏洞

Cisco HyperFlex Software是美国思科（Cisco）公司的一套套可扩展的分布式文件系统。该系统通过云管理提供统一的计算、存储和网络，并提供企业级数据管理和优化服务。 Cisco HyperFlex Software 4.0(1a)之前版本中存在加密问题漏洞，该漏洞源于程序没有充分进行密钥管理。远程攻击者可通过获取加密密钥利用该漏洞实施中间人攻击。

N/A

N/A