Lucene search

[email protected]CVE-2019-5505

HistorySep 24, 2019 - 8:15 p.m.

CVE-2019-5505

2019-09-2420:15:12

CWE-522

CWE-319

[email protected]

web.nvd.nist.gov

cve-2019-5505

ontap

select deploy

administration utility

plaintext credentials

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext.

Affected configurations

NVD

Node

netappontap_select_deploy_administration_utilityRange2.2–2.12.1

netappontap_select_deploy_administration_utilityMatch-

CPENameOperatorVersion
netapp:ontap_select_deploy_administration_utilitynetapp ontap select deploy administration utilityle2.12.1
netapp:ontap_select_deploy_administration_utilitynetapp ontap select deploy administration utilityeq-

CPE	Name	Operator	Version
netapp:ontap_select_deploy_administration_utility	netapp ontap select deploy administration utility	le	2.12.1
netapp:ontap_select_deploy_administration_utility	netapp ontap select deploy administration utility	eq	-

CNA Affected

[
  {
    "product": "ONTAP Select Deploy administration utility",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2.2 through 2.12.1"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20190923-0002/

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Related for CVE-2019-5505

prion1 cvelist1 nvd1