Code injection

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true...

Code injection

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true...

CVE-2020-8590

CVE-2020-8590 affects NetApp Clustered Data ONTAP prior to 9.1P18 and 9.3P12. The vulnerability allows an attacker to discover node names via AutoSupport bundles even when the remove-private-data flag is set. Root cause is information disclosure through AutoSupport in affected releases; no exploi...

CVE-2020-8578

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true...

CVE-2020-8578

CVE-2020-8578 affects NetApp Clustered Data ONTAP versions prior to 9.3P20. The vulnerability enables information disclosure by allowing an attacker to discover node names via AutoSupport bundles, even when the remove-private-data parameter is set to true. The NVD/NIST entry lists a Low severity ...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12094)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover data present on other storage...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12093)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover other storage virtual machines SVM...

CVE-2020-8589

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines SVMs and filenames on those SVMs...

CVE-2020-8588

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines SVMs...

CVE-2020-8589

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines SVMs and filenames on those SVMs...

CVE-2020-8588

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines SVMs...

Code injection

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines SVMs...

Code injection

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines SVMs and filenames on those SVMs...

CVE-2020-8589

CVE-2020-8589 affects NetApp Clustered Data ONTAP, with versions prior to 9.3P20 and 9.5P15 vulnerable to information disclosure: unauthorized tenant users could discover other SVM names and filenames. Root cause is a disclosure weakness in the address/authorization model of the ONTAP multi-tenan...

CVE-2020-8589

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines SVMs and filenames on those SVMs...

CVE-2020-8588

In NetApp Clustered Data ONTAP, versions prior to 9.3P20 and 9.5P15 are affected by CVE-2020-8588, which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines (SVMs). The issue is an information disclosure vulnerability related to cross-tenant d...

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover data present on other storage...

Vulnerabilities fixed in Clustered Data ONTAP

NetApp has fixed two vulnerabilities. An unauthorized malicious party can use the vulnerabilities to discover the presence of data, which is stored outside his authorizations. stored. NetApp has released updates to fix the vulnerabilities in Clustered Data ONTAP. For more information, see:...

NetApp Clustered Data ONTAP Arbitrary Data Overwrite Vulnerability

NetApp Clustered Data ONTAP is a storage operating system for use in clustered mode. A security vulnerability exists in NetApp Clustered Data ONTAP that allows remote attackers to exploit the vulnerability by submitting special requests that can overwrite system data...

CVE-2020-8581

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled...