359 matches found
Design/Logic Flaw
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
CVE-2016-5374
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
CVE-2016-5374
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
CVE-2016-5374
Affected software : NetApp Data ONTAP 9.0 and 9.1 before 9.1P1. Vulnerability : improper handling of the owner_rights ACL entry allows remote authenticated users who own SMB-hosted data to bypass sharing restrictions. Impact : bypasses intended sharing controls; confidentiality, integrity, and av...
NetApp OnCommUnified Manager for Clustered Data ONTAP Arbitrary Code Execution Vulnerability
NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3-6.4p1 include a default privileged account for unified management that allows remote attackers to execute arbitrary code...
CVE-2016-6495
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...
Information disclosure
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...
CVE-2016-4341
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
Information disclosure
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
CVE-2016-6667
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2016-6667
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2016-4341
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
CVE-2016-4341
NetApp Clustered Data ONTAP prior to version 8.3.2P7 is affected by CVE-2016-4341. The vulnerability allows remote attackers to obtain SMB share information via unspecified vectors, implying an information-disclosure risk. The issue affects ONTAP in the clustering (clustered) deployment and is mi...
CVE-2016-6667
Affected product and version : NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1. Vulnerability : presence of a default privileged account that enables remote attackers to execute arbitrary code via unspecified vectors. Impact : high-severity remote code execution with p...
CVE-2016-6495
CVE-2016-6495 affects NetApp Data ONTAP prior to 8.2.4P5 when operated in 7-Mode. The vulnerability is an information-disclosure issue where remote attackers can obtain information about volumes configured for HTTP access. The available connected records corroborate an information-disclosure impa...
CVE-2016-6495
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...
CVE-2015-8020
Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...
Information disclosure
Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...