PT-2017-8483

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P7 Description The issue allows remote attackers to obtain SMB share information. Recommendations For versions prior to 8.3.2P7, update to version 8.3.2P7 or later to resolve the issue...

CVE-2016-6495: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...

PT-2017-9012

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3 through 6.4P1 Description The issue concerns a default privileged account that allows remote attackers to execute arbitrary code. The exact vectors used for the attack are...

PT-2017-8983

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.4P5 Description The issue allows remote attackers to obtain information about the volumes configured for HTTP access when operating in 7-Mode. Recommendations For versions prior to 8.2.4P5, update to...

Information disclosure

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

Information disclosure

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2016-6820

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2016-6820

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2015-8020

CVE-2015-8020 affects NetApp Clustered Data ONTAP (versions 8.0, 8.3.1, 8.3.2). The flaw is a default privileged account that can be used under certain conditions for unauthorized information disclosure. The connected documents confirm the existence of a privileged-account credential issue in Clu...

CVE-2016-6820

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

CVE-2016-6820

The CVE-2016-6820 entry describes an information-disclosure vulnerability in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, affecting versions before 1.2. The underlying issue allows an unauthenticated user to view sensitive data in cleartext. Connected records corroborate that NetApp M...

CVE-2015-8020: Exposure of Sensitive Information to an Unauthorized Actor

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2016-6820: Exposure of Sensitive Information to an Unauthorized Actor

MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user...

PT-2017-7313

Name of the Vulnerable Software and Affected Versions Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 Description The issue concerns a default privileged account in Clustered Data ONTAP that can be exploited under certain conditions for unauthorized information disclosure. Recommendations For...

CVE-2016-3064

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

Code injection

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

CVE-2016-3064

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

CVE-2016-3064: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...