NetApp Data ONTAP Detection (NTP)

NTP based detection of NetApp Data ONTAP. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.140347"...

NetApp Data ONTAP Denial of Service Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. NetApp Data ONTAP denial of service vulnerability can be exploited by an...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2017-24378)

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. An information disclosure vulnerability exists in NetApp Cluster...

CVE-2017-12423

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors...

CVE-2016-1895

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

CVE-2016-1895

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors...

CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors...

CVE-2017-12423

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors...

CVE-2017-14053

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

Design/Logic Flaw

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

Code injection

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors...

Input validation

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

CVE-2017-12423

NetApp Clustered Data ONTAP 8.x before 8.3.2P12 is affected by an information-disclosure issue in Storage Virtual Machines (SVMs). Remote authenticated users can read data from other SVMs via unspecified vectors. Impact and root cause are described as unspecified flaws in SVMs. The Nessus entry n...

CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors...

CVE-2017-14053

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session...

CVE-2017-12421

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 is affected by CVE-2017-12421. A remote authenticated attacker can execute arbitrary code on the storage controller via unspecified vectors. Impact is described as remote code execution with potential data exposure on affected ONTAP versions. Reme...

CVE-2016-1895

NetApp Data ONTAP (clusters running before 8.2.5 or 8.3.x before 8.3.2P12) is affected by CVE-2016-1895. An authenticated remote attacker can cause a denial of service through unsafe handling of certain user input strings in the OS. The vulnerability’s root cause is related to input string proces...

CVE-2016-1895

NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling...

CVE-2017-14053

Affected product / component: NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1. Vulnerability: HTTPS session cookies do not have the secure flag set for an unspecified cookie, enabling potential cookie capture by intercepting transmission within an HTTP session. Root cause (...