An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.
The product does not validate, or incorrectly validates, a certificate.