NetApp MetroCluster Tiebreaker for clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. An information disclosure vulnerability exists in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, which allows remote attackers to submit a special request to obtain...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. An information disclosure vulnerability exists in NetApp Cluster...

The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.

The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2016-1645

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP version 8.3.1 Description The issue arises from the improper verification of X.509 certificates from TLS servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2016-1563: Improper Input Validation

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...