CVE-2019-17272: Undefined Security Weakness

All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges...

CVE-2019-5504: Missing Authentication for Critical Function

ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...

CVE-2019-5505: Cleartext Transmission of Sensitive Information

ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...