Lucene search

NetappCVE-2018-5490

HistoryAug 03, 2018 - 7:29 p.m.

CVE-2018-5490

2018-08-0319:29:00

CWE-732

netapp

web.nvd.nist.gov

cve-2018-5490

netapp

data ontap

security

update

smbv2

smbv3

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than “read-only” access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release candidates (RCs) are requested to update their systems to the NetApp Data ONTAP 8.3 GA release.

Affected configurations

Nvd

Node

netappclustered_data_ontapRange<8.3

VendorProductVersionCPE
netappclustered_data_ontap*cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netapp	clustered_data_ontap	*	cpe:2.3:a:netapp:clustered_data_ontap::::::::

CNA Affected

[
  {
    "product": "Clustered Data ONTAP",
    "vendor": "NetApp",
    "versions": [
      {
        "status": "affected",
        "version": "8.3 Release Candidate versions"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20150324-0001/

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2018-5490