CVE-2015-7887

NetApp SnapCenter Server 1.0 is affected by CVE-2015-7887. The issue is an authentication bypass that permits remote authenticated users to list and delete backups. The vulnerability is documented across multiple sources (NVD entry for CVE-2015-7887 and related CNVD/CVE records), indicating a ser...

NetApp OnCommand API Services Information Disclosure Vulnerability

NetApp OnCommand API Services is the United States NetApp set of API management tools. An information disclosure vulnerability exists in versions of NetApp OnCommand API Services prior to 1.2P3. A remote attacker could exploit this vulnerability to obtain sensitive information...

CVE-2017-8919

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors...

CVE-2017-8919

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors...

Default credentials

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors...

CVE-2017-8919

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors...

CVE-2017-8919

CVE-2017-8919 affects NetApp OnCommand API Services (versions before 1.2P3). The vulnerability occurs because LDAP BIND passwords are logged when a user authenticates via the REST API, allowing remote authenticated users to obtain sensitive password information via unspecified vectors. Impact is ...

NetApp Clustered Data ONTAP Password Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP. ...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

Command injection

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2017-7947

CVE-2017-7947 affects NetApp Clustered Data ONTAP prior to 8.3.2P11, 9.0 prior to P4, and 9.1 prior to P5, enabling attackers to obtain sensitive password information by abusing how passwords entered on the command line are logged non-interactively. Root cause reported in connected documents is p...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

NetApp AltaVault Man-in-the-Middle Attack Vulnerability

NetApp AltaVault is a cloud storage solution from NetApp. The solution features scalability, data encryption, and support for data backup and recovery. A security vulnerability exists in NetApp AltaVault 4.1 and earlier versions. An attacker could use this vulnerability to conduct a...

NetApp OnCommand System Manager Information Disclosure Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A security vulnerability exists in NetApp OnCommand System Manager. A remote attacker cou...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3998

NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

Design/Logic Flaw

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...