EUVD-2017-17859

Malware in sbrugna...

NetApp OnCommand API Services and Service Level Manager Information Disclosure Vulnerability

NetApp OnCommand API Services and Service Level Manager are both products of the U.S. NetApp OnCommand API Services is a set of API management tools.Service Level Manager is service content management software. An information disclosure vulnerability exists in NetApp OnCommand API Services versio...

CVE-2017-8919: Undefined Security Weakness

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors...

PT-2017-18623

Name of the Vulnerable Software and Affected Versions NetApp OnCommand API Services versions prior to 1.2P3 Description The issue allows remote authenticated users to obtain sensitive password information. This occurs because the LDAP BIND password is logged when a user attempts to log in using t...