PT-2021-12799

Name of the Vulnerable Software and Affected Versions: OnCommand System Manager versions prior to 9.3P20 OnCommand System Manager version 9.4 prior to 9.4P3 Description: The issue allows HTTP clients to cache sensitive responses, making them accessible to an attacker with access to the system whe...

NetApp OnCommand Unified Manager Information Disclosure Vulnerability

Netapp NetApp OnCommand Unified Manager is a suite of ONTAP system management software from the U.S. company NetApp Netapp. The software can simplify data management, monitor the storage system infrastructure and detect failures. An information disclosure vulnerability exists in NetApp OnCommand...

CVE-2020-8585

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

CVE-2020-8585

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

Design/Logic Flaw

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

CVE-2020-8585

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

CVE-2020-8585

CVE-2020-8585 affects NetApp OnCommand Unified Manager Core Package before version 5.2.5. The vulnerability enables disclosure of sensitive account information to unauthorized users via PuTTY Link (plink). No exploitation details are provided in the documents; the root cause is described as an in...

CVE-2020-8585

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

NetApp OnCommand Unified Manager post-installation link vulnerability

Netapp NetApp OnCommand Unified Manager is a suite of ONTAP system management software from the U.S. company NetApp Netapp. The software can simplify data management, monitor the storage system infrastructure and detect failures. An information disclosure vulnerability exists in NetApp OnCommand...

PT-2021-12798

Name of the Vulnerable Software and Affected Versions: OnCommand Unified Manager Core Package versions prior to 5.2.5 Description: The issue may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink. Recommendations: For OnCommand Unified Manager Core Packag...

CVE-2020-8585: Improper Link Resolution Before File Access

OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link plink...

Design/Logic Flaw

In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User...

PT-2020-11584

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description A permissions bypass issue exists due to a missing permission check in the onCommand method of CompanionDeviceManagerService.java. This could lead to local escalation of privilege, allowing backgroun...

NetApp OnCommand System Manager Cross-Site Scripting Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A cross-site scripting vulnerability in NetApp OnCommand System Manager version 9.3 prior...

CVE-2019-17276

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...

CVE-2019-17276

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...

Cross site scripting

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...

CVE-2019-17276

OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scripts into the SNMP Community Names label field...

CVE-2019-17276

The CVE describes a cross-site scripting vulnerability in NetApp OnCommand System Manager, affecting versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2. The root cause is stated as a lack of proper validation of client-side data by the WEB application, enabling an authenticated attacker to injec...

PT-2020-9890

Name of the Vulnerable Software and Affected Versions OnCommand System Manager versions 9.3 prior to 9.3P18 OnCommand System Manager versions 9.4 prior to 9.4P2 Description The issue is related to a cross-site scripting vulnerability. This could allow an authenticated attacker to inject arbitrary...