CVE-2018-5496: Exposure of Sensitive Information to an Unauthorized Actor

Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user...

Moderate: Red Hat Security Advisory: openstack-cinder security and bug fix update

An update for openstack-cinder is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

Code injection

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

CVE-2018-5490

NetApp Data ONTAP 8.3 RC releases are affected by CVE-2018-5490 where read-only export policy rules were not correctly enforced, potentially allowing more than read-only access via authenticated SMBv2/v3 clients. The issue has been resolved in the GA 8.3 release; customers running RCs should upda...

CVE-2018-5490: Incorrect Permission Assignment for Critical Resource

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

PT-2018-16990

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3 GA Description The issue concerns the incorrect enforcement of Read-Only export policy rules, potentially allowing more than read-only access from authenticated SMBv2 and SMBv3 clients. This ha...

Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and two memory corruption vulnerabilities. Bash is used by IBM N Series products using certain versions of the following: Data...

NetApp OnTAP Web Detection

Binary data ontapwebuidetect.nbin...

NetApp Clustered Data ONTAP Denial of Service Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A denial of service vulnerability exists in NetApp Clustered Dat...

CVE-2017-14583

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

Design/Logic Flaw

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP (versions 9.x before 9.1P10 and 9.2P2) is affected by CVE-2017-14583, a vulnerability that can cause Denial of Service in SMB environments. The root cause is not explicitly detailed in the provided documents beyond the affected versions and the DoS impact. The CVE refe...

PT-2017-13560

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 Description The issue allows an attacker to cause a Denial of Service DoS in SMB environments. Recommendations For versions prior to 9.1P10, update to version 9.1P10 or later...

CVE-2017-14583: Improper Input Validation

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

NetApp VASA Provider for Clustered Data ONTAP Information Disclosure Vulnerability

NetApp VASA Provider for Clustered Data ONTAP is a virtual program for VASA for Clustered Data ONTAP storage systems from NetApp, USA. The program is capable of providing communication capabilities between storage arrays. A security vulnerability exists in NetApp VASA Provider for Clustered Data...