EUVD-2017-5169

Malware in sbrugna...

OnCommand Insight Information Disclosure Vulnerability

NetApp Oncommand Insight is a suite of hybrid cloud data center management software from US-based NetApp. The software provides monitoring and management of multi-vendor IT infrastructure, optimization of storage resource management and other functions. An information disclosure vulnerability...

Design/Logic Flaw

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

CVE-2017-13652: Improper Input Validation

NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could cause a user to perform an unintended action in the user interface...

PT-2018-5587

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand Insight versions prior to 7.2.0 NetApp OnCommand Insight version 7.3.0 Description: The issue allows for clickjacking attacks, which could cause a user to perform an unintended action in the user interface. Recommendations: F...

NetApp OnCommand Insight Data Warehouse Component Security Bypass Vulnerability

NetApp OnCommand Insight is a suite of hybrid cloud data center management software from NetApp. The software provides monitoring and management of multi-vendor IT infrastructures, optimized storage resource management, etc. Data Warehouse is one of the data warehouse components. A security...

CVE-2017-5600

The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account...

CVE-2017-5600

The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account...

Design/Logic Flaw

The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account...

PT-2017-16605

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Insight versions prior to 7.2.3 Description The issue allows remote attackers to gain administrative access by exploiting a default privileged account in the Data Warehouse component. Recommendations For versions prior to 7.2....

CVE-2017-5600: Use of Hard-coded Credentials

The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privileged account...