CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1563

Affected product/versions: NetApp Clustered Data ONTAP 8.3.1. Root cause: TLS server X.509 certificates are not properly verified. Impact: Allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Exploitation status in sources: No exploitati...

PT-2016-1645

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP version 8.3.1 Description The issue arises from the improper verification of X.509 certificates from TLS servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2016-1563: Improper Input Validation

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

mysupport.netapp.com XSS vulnerability

Vulnerable URL: http://mysupport.netapp.com/search?q=';alert"XSSPOSED";//=on=p=xmlnodtd=gspub=public=gs==p=50=langen Details: Description| Value ---|--- Patched:| Yes, at 31.05.2017 Latest check for patch:| 31.05.2017 20:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

NetApp Data ONTAP Information Disclosure Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions prior to 8.2.4P...

CVE-2015-7886

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

Code injection

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

CVE-2015-7886

NetApp Data ONTAP before 8.2.4P1 is affected when 7-Mode and HTTP access are enabled. A remote attacker can obtain sensitive volume information via unspecified vectors. The vulnerability exists in versions prior to 8.2.4P1; mitigations include upgrading to 8.2.4P1 or later. The impact is informat...

CVE-2015-7886

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

CVE-2015-7886: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

PT-2016-3838

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.4P1 Description The issue allows remote attackers to obtain sensitive volume information when 7-Mode and HTTP access are enabled. Recommendations For versions prior to 8.2.4P1, update to version 8.2.4P1 ...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...

NetApp SnapDrive for Windows Information Disclosure Vulnerability

NetApp SnapDrive for Windows is a solution from the U.S. company NetApp to automate storage configuration tasks on Windows-based platforms. A security vulnerability exists in NetApp SnapDrive for Windows, which allows remote attackers to exploit the vulnerability to obtain sensitive information...

kb.netapp.com Open Redirect vulnerability

Vulnerable URL: https://kb.netapp.com/support/index?page=answerlink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 18:07 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. An authentication bypass vulnerability exists in NetApp SnapCenter Server, which could be exploited by remote attackers...

mysupport.netapp.com XSS vulnerability

Vulnerable URL: http://mysupport.netapp.com/search?q=I+need+support+on...=on=p=xmlnodtd=gspub=public=gs=%2A=p=50="'--; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Oracle: Security Advisory (ELSA-2013-0132)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...