CVE-2018-5490

NetApp Data ONTAP 8.3 RC releases are affected by CVE-2018-5490 where read-only export policy rules were not correctly enforced, potentially allowing more than read-only access via authenticated SMBv2/v3 clients. The issue has been resolved in the GA 8.3 release; customers running RCs should upda...

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and two memory corruption vulnerabilities. Bash is used by IBM N Series products using certain versions of the following: Data...

Design/Logic Flaw

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP (versions 9.x before 9.1P10 and 9.2P2) is affected by CVE-2017-14583, a vulnerability that can cause Denial of Service in SMB environments. The root cause is not explicitly detailed in the provided documents beyond the affected versions and the DoS impact. The CVE refe...

NetApp VASA Provider for Clustered Data ONTAP Information Disclosure Vulnerability

NetApp VASA Provider for Clustered Data ONTAP is a virtual program for VASA for Clustered Data ONTAP storage systems from NetApp, USA. The program is capable of providing communication capabilities between storage arrays. A security vulnerability exists in NetApp VASA Provider for Clustered Data...

Authentication flaw

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

CVE-2016-6904 affects NetApp VASA Provider for Clustered Data ONTAP prior to 7.0P1. A web server accepts plain text authentication, enabling an unauthenticated attacker to obtain authentication credentials. Impact: credential disclosure and potential access to protected data/interfaces. Exploitat...

CVE-2017-5201

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064...

Code injection

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064...

CVE-2017-5201

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064...

CVE-2017-5201

NetApp Clustered Data ONTAP exposes an information-disclosure vulnerability (CVE-2017-5201) affecting versions prior to 8.3.2P8 and 9.0 prior to P2. The issue allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors. Root cause and exact exploit...

NetApp Clustered Data ONTAP < 8.2.5 / 8.3.x < 8.3.2P12 (NTAP-20170831-0003)

The version of NetApp Clustered Data ONTAP running on the remote host is prior to 8.2.5 or 8.3.x prior to 8.3.2P12. It is, therefore, affected by an unspecified flaw in the handling of certain user input strings which allow an authenticated user to cause a Denial of Service DoS condition. Note th...

NetApp Clustered Data ONTAP 8.x < 8.3.2P8 / 9.x < 9.0P2 (NTAP-20170814-0001)

The version of NetApp Clustered Data ONTAP running on the remote host is 8.x prior to 8.3.2P8 or 9.x prior to 9.0P2. It is, therefore, affected by a heap overflow vulnerability in the SMB implementation that allows a remote unauthenticated attacker to cause a denial of service disruption or execu...

NetApp Data ONTAP Detection (HTTP)

HTTP based detection of NetApp Data ONTAP. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.140348...

NetApp Data ONTAP Detection (SNMP)

SNMP based detection of NetApp Data ONTAP. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.140349...