Is Migration Manager for AD affected by the Spectre vulnerability (CVE-2017-5753 & CVE-2017-5754) or Meltdown (CVE-2017-5715)? (4261861)

Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to get hold of secrets stored in the memory of other running programs. This might include your passwords stored in a password manager or browser, your personal photos, emails, instant messages and even business-critical documents.

Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure, it might be possible to steal data from other customers.

Meltdown and Spectre are hardware-level vulnerabilities. As such, every operating system is susceptible including the Migration Manager for AD product. The Quest Product team does not yet have a patch available or an ETA for the fix, but since the Migration Manager is a closed-source based systems, there is no perceived risk from the Migration Manager for AD at this time. 

For more information on these vulnerabilities see the articles below:

o   Intel: https://newsroom.intel.com/news/intel-responds-to-security-research-findings/

o   Microsoft:

-Client OS: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

-Server OS: https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution

o   VMWare: https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html
o   Hyper-V: https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution