Command injection

2017-07-1721:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line.

CPENameOperatorVersion
clustered_data_ontapeq8.3.2 p10
clustered_data_ontapeq9.1 p4
clustered_data_ontapeq9.0 p3

Name	Operator	Version
clustered_data_ontap	eq	8.3.2 p10
clustered_data_ontap	eq	9.1 p4
clustered_data_ontap	eq	9.0 p3

References

kb.netapp.com/support/s/article/NTAP-20170630-0001