CVE-2016-6667

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-4341

NetApp Clustered Data ONTAP prior to version 8.3.2P7 is affected by CVE-2016-4341. The vulnerability allows remote attackers to obtain SMB share information via unspecified vectors, implying an information-disclosure risk. The issue affects ONTAP in the clustering (clustered) deployment and is mi...

CVE-2016-6667

Affected product and version : NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1. Vulnerability : presence of a default privileged account that enables remote attackers to execute arbitrary code via unspecified vectors. Impact : high-severity remote code execution with p...

CVE-2016-4341: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...

PT-2017-8483

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P7 Description The issue allows remote attackers to obtain SMB share information. Recommendations For versions prior to 8.3.2P7, update to version 8.3.2P7 or later to resolve the issue...

CVE-2016-6667: Undefined Security Weakness

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2017-9012

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3 through 6.4P1 Description The issue concerns a default privileged account that allows remote attackers to execute arbitrary code. The exact vectors used for the attack are...

Information disclosure

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2016-6820

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

Information disclosure

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2015-8020

CVE-2015-8020 affects NetApp Clustered Data ONTAP (versions 8.0, 8.3.1, 8.3.2). The flaw is a default privileged account that can be used under certain conditions for unauthorized information disclosure. The connected documents confirm the existence of a privileged-account credential issue in Clu...

CVE-2016-6820

The CVE-2016-6820 entry describes an information-disclosure vulnerability in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, affecting versions before 1.2. The underlying issue allows an unauthenticated user to view sensitive data in cleartext. Connected records corroborate that NetApp M...

CVE-2015-8020: Exposure of Sensitive Information to an Unauthorized Actor

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

PT-2017-7313

Name of the Vulnerable Software and Affected Versions Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 Description The issue concerns a default privileged account in Clustered Data ONTAP that can be exploited under certain conditions for unauthorized information disclosure. Recommendations For...

Code injection

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

CVE-2016-3064

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

PT-2016-5350

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.2.4P4 NetApp Clustered Data ONTAP versions 8.3.x prior to 8.3.2P2 Description The issue allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vector...

CVE-2016-3064: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...