Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation (Algorithm Downgrade) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Weakness
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Networker | Dell | * | 19.13 (excluding) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/220.html
- https://cwe.mitre.org/data/definitions/606.html
- https://cwe.mitre.org/data/definitions/620.html