CVE-2015-8020

CVE-2015-8020 affects NetApp Clustered Data ONTAP (versions 8.0, 8.3.1, 8.3.2). The flaw is a default privileged account that can be used under certain conditions for unauthorized information disclosure. The connected documents confirm the existence of a privileged-account credential issue in Clu...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2016-6820

The CVE-2016-6820 entry describes an information-disclosure vulnerability in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, affecting versions before 1.2. The underlying issue allows an unauthenticated user to view sensitive data in cleartext. Connected records corroborate that NetApp M...

Code injection

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

CVE-2016-3064

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

NetApp MetroCluster Tiebreaker for clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. An information disclosure vulnerability exists in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, which allows remote attackers to submit a special request to obtain...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. An information disclosure vulnerability exists in NetApp Cluster...

The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.

The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...