CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2017-7947

CVE-2017-7947 affects NetApp Clustered Data ONTAP prior to 8.3.2P11, 9.0 prior to P4, and 9.1 prior to P5, enabling attackers to obtain sensitive password information by abusing how passwords entered on the command line are logged non-interactively. Root cause reported in connected documents is p...

PT-2017-18020

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P11 NetApp Clustered Data ONTAP version 9.0 before P4 NetApp Clustered Data ONTAP version 9.1 before P5 Description The issue allows attackers to obtain sensitive password information. This is...

CVE-2017-7947: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

Information disclosure

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

Design/Logic Flaw

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3400

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

CVE-2016-3400

The CVE-2016-3400 issue affects NetApp Data ONTAP in 7-Mode (and related 8.1/8.2 lines). Vulnerable component is SMB protocol handling where SMB signing enforcement can fail, enabling man-in-the-middle attacks that may disclose sensitive data, elevate privileges, or cause a denial of service. IBM...

CVE-2016-3997

NetApp CVE-2016-3997 affects Clustered Data ONTAP (N series) where SMB signing is not enforced by default, enabling MITM attacks that can disclose data, escalate privileges, or cause DoS. Root cause: SMB implementation fails to require signing by default. Impact: information disclosure, privilege...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3400: Undefined Security Weakness

NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service via vectors related to the SMB protocol...

PT-2017-8380

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 8.1 through 8.2 Description The issue allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service. This is related to vectors involving the SMB protocol...

CVE-2016-3997: Undefined Security Weakness

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

PT-2017-8439

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP affected versions not specified Description The issue allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service. This is due to the failure to enable SMB signi...

NetApp Clustered Data ONTAP Man-in-the-Middle Attack Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A man-in-the-middle attack vulnerability exists in the default...

IBM Clustered Data ONTAP Man-in-the-Middle Security Bypass Vulnerability

IBM Clustered Data ONTAP is the IBM Extreme Bus Schedule. A security bypass vulnerability exists in IBM Clustered Data ONTAP. An attacker could perform unauthorized operations by conducting a man-in-the-middle attack...