679 matches found
Code injection
Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service DoS...
CVE-2019-5508
CVE-2019-5508 concerns NetApp Clustered Data ONTAP vulnerability that enables a Denial of Service via l2ping. Public details in the connected documents confirm affected software versions primarily include NetApp Clustered Data ONTAP 9.2 through 9.4 (with some sources extending to 9.6). The vulner...
CVE-2019-5508
Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service DoS...
PT-2019-17723
Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 9.2 through 9.4 Description The issue allows an attacker to cause a Denial of Service DoS by using l2ping. Recommendations For versions 9.2 through 9.4, consider restricting access to l2ping to minimize the...
CVE-2019-5508: Undefined Security Weakness
Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service DoS...
NetApp Clustered Data ONTAP CVE-2019-5508 Denial of Service Vulnerability
Description NetApp Clustered Data ONTAP is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions. Clustered Data ONTAP 9.2 through 9.6 versions are vulnerable. Technologies Affected NetApp Clustered Data ONTAP 9.2 NetApp Clustere...
CVE-2019-5506
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks...
CVE-2019-5506
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks...
Code injection
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks...
CVE-2019-5506
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks...
CVE-2019-5506
NetApp Clustered Data ONTAP (version 9.0+ as described) is affected by a hostname verification issue that can enable impersonation via man‑in‑the‑middle attacks under certain circumstances. The vulnerability arises from not enforcing hostname verification, per the CVE description. Exploitation de...
PT-2019-17721
Name of the Vulnerable Software and Affected Versions Clustered Data ONTAP versions 9.0 and higher Description The issue allows for impersonation via man-in-the-middle attacks due to a lack of hostname verification under certain circumstances. Recommendations For Clustered Data ONTAP versions 9.0...
CVE-2019-5506: Improper Certificate Validation
Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks...
NetApp ONTAP Select Deploy Information Disclosure Vulnerability (CNVD-2019-43849)
ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. An information disclosure vulnerability exists in ONTAP Select Deploy. The vulnerability stems from the product transmitting credentials in plain text. An attacker could exploit this vulnerability to...
NetApp ONTAP Select Deploy Remote Command Execution Vulnerability
ONTAP Select Deploy is a management utility for deploying and managing ONTAP Select clusters. A remote command execution vulnerability exists in ONTAP Select Deploy 2.12, 2.12.1. An attacker could exploit this vulnerability to perform administrative operations...
CVE-2019-5505
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...
CVE-2019-5504
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions...
CVE-2019-5505
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext...