SMB signing vulnerability on Tenable Nessus
Applies to
- ONTAP 9
- Tenable Nessus
Issue
- Tenable Nessus is reporting an alert which says that signing is not required on the remote SMB server.
- An unauthenticated, remote attacker can exploit this to conduct man-in-the-middle attacks against the SMB server.