Lucene search
K

754 matches found

CNVD
CNVD
added 2017/07/19 12:0 a.m.2 views

NetApp Clustered Data ONTAP Password Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP. ...

6.5CVSS6.5AI score0.0029EPSS
Exploits0References1
Prion
Prion
added 2017/07/17 9:29 p.m.16 views

Command injection

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

5CVSS6.5AI score0.0029EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/07/17 9:29 p.m.17 views

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

6.5CVSS6.6AI score0.0029EPSS
Exploits0References1
OSV
OSV
added 2017/07/17 9:29 p.m.1 views

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

6.5CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2017/07/17 9:0 p.m.50 views

CVE-2017-7947

CVE-2017-7947 affects NetApp Clustered Data ONTAP prior to 8.3.2P11, 9.0 prior to P4, and 9.1 prior to P5, enabling attackers to obtain sensitive password information by abusing how passwords entered on the command line are logged non-interactively. Root cause reported in connected documents is p...

6.5CVSS6.5AI score0.0029EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/07/17 9:0 p.m.27 views

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

6.6AI score0.0029EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/07 12:0 a.m.2 views

NetApp AltaVault Man-in-the-Middle Attack Vulnerability

NetApp AltaVault is a cloud storage solution from NetApp. The solution features scalability, data encryption, and support for data backup and recovery. A security vulnerability exists in NetApp AltaVault 4.1 and earlier versions. An attacker could use this vulnerability to conduct a...

8.1CVSS6.8AI score0.00448EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/05 12:0 a.m.2 views

NetApp OnCommand System Manager Information Disclosure Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A security vulnerability exists in NetApp OnCommand System Manager. A remote attacker cou...

8.1CVSS6.7AI score0.00688EPSS
Exploits0References1
NVD
NVD
added 2017/07/03 4:29 p.m.19 views

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

7.5CVSS7.5AI score0.00737EPSS
Exploits0References4
OSV
OSV
added 2017/07/03 4:29 p.m.1 views

CVE-2016-3998

NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

8.1CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2017/07/03 4:29 p.m.13 views

Information disclosure

NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

5.1CVSS7.4AI score0.00448EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2017/07/03 4:29 p.m.15 views

Information disclosure

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

6.8CVSS7.3AI score0.00737EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2017/07/03 4:29 p.m.19 views

Design/Logic Flaw

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

6.8CVSS7.3AI score0.00426EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/07/03 4:29 p.m.2 views

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

7.5CVSS5.4AI score
Exploits0References2
Prion
Prion
added 2017/07/03 4:29 p.m.16 views

Design/Logic Flaw

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup...

6.8CVSS7AI score0.00688EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/07/03 4:29 p.m.9 views

CVE-2016-3998

NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

8.1CVSS7.9AI score0.00448EPSS
Exploits0References1
NVD
NVD
added 2017/07/03 4:29 p.m.17 views

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

7.5CVSS7.6AI score0.00426EPSS
Exploits0References2
NVD
NVD
added 2017/07/03 4:29 p.m.16 views

CVE-2016-5045

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup...

8.1CVSS7.8AI score0.00688EPSS
Exploits0References1
OSV
OSV
added 2017/07/03 4:29 p.m.2 views

CVE-2016-5045

NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup...

8.1CVSS5.8AI score0.00688EPSS
Exploits0References1
OSV
OSV
added 2017/07/03 4:29 p.m.2 views

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

7.5CVSS5.8AI score0.00737EPSS
Exploits0References4
Rows per page
Query Builder