679 matches found
CVE-2017-5995
The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...
CVE-2016-5374
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
CVE-2017-5995
The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...
CVE-2016-5374
Affected software : NetApp Data ONTAP 9.0 and 9.1 before 9.1P1. Vulnerability : improper handling of the owner_rights ACL entry allows remote authenticated users who own SMB-hosted data to bypass sharing restrictions. Impact : bypasses intended sharing controls; confidentiality, integrity, and av...
CVE-2017-5995
The CVE-2017-5995 entry concerns NetApp ONTAP Select Deploy administration utility versions 2.0–2.2.1. It indicates a remote information disclosure vulnerability via unspecified vectors, affecting the deployment utility component. The connected documents do not provide root cause analysis, concre...
CVE-2016-5374
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
CVE-2016-5374: Undefined Security Weakness
NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the ownerrights ACL entry...
PT-2017-16815
Name of the Vulnerable Software and Affected Versions NetApp ONTAP Select Deploy administration utility versions 2.0 through 2.2.1 Description The issue might allow remote attackers to obtain sensitive information via unspecified vectors. Recommendations For versions 2.0 through 2.2.1, at the...
CVE-2017-5995: Exposure of Sensitive Information to an Unauthorized Actor
The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors...
PT-2017-8713
Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 9.0 through 9.1 before 9.1P1 Description The issue allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions. This is due to improper handling of the owner rights ACL entry...
NetApp Data ONTAP Information Disclosure Vulnerability (CNVD-2017-01410)
NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in versions of NetApp Data ONTAP prior to...
NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2017-01406)
NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP...
NetApp OnCommUnified Manager for Clustered Data ONTAP Arbitrary Code Execution Vulnerability
NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3-6.4p1 include a default privileged account for unified management that allows remote attackers to execute arbitrary code...
CVE-2016-6495
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...
Information disclosure
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
Code injection
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2016-4341
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
CVE-2016-6495
NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access...
CVE-2016-6667
NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...