CVE:CVE-2022-1434
CNNVD:CNNVD-202205-1961
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 存在安全漏洞，该漏洞源于RC4-MD5 密码套件错误地将 AAD 数据用作 MAC 密钥。这使得 MAC 密钥可以轻松预测。攻击者可以利用该漏洞通过执行中间人攻击来修改从一个端点发送到OpenSSL 3.0接收者的数据，从而使修改后的数据仍能通过 MAC 完整性检查。
solution:Upgrade openssl openssl to a higher version than 3.0.3,and avoid the version [3.0.0,3.0.3); Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp clustered_data_ontap_antivirus_connector to a higher version than -; Upgrade netapp santricity_smi-s_provider to a higher version than -; Upgrade netapp smi-s_provider to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp a700s_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp aff_8300_firmware to a higher version than -; Upgrade netapp fas_8300_firmware to a higher version than -; Upgrade netapp aff_8700_firmware to a higher version than -; Upgrade netapp fas_8700_firmware to a higher version than -; Upgrade netapp aff_a400_firmware to a higher version than -; Upgrade netapp fabric-attached_storage_a400_firmware to a higher version than -; Upgrade netapp a250_firmware to a higher version than -; Upgrade netapp aff_500f_firmware to a higher version than -; Upgrade netapp fas_500f_firmware to a higher version than -