CVE-2018-5497

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user...

Design/Logic Flaw

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user...

CVE-2018-5497

Technical details about CVE-2018-5497 are not publicly provided in the connected documents. The initial description notes information disclosure for specific Clustered Data ONTAP versions; monitor for updates.

CVE-2018-5497

Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user...

Troubleshooting thin provisioning for shared block storage on XenServer

XenServer and Citrix Hypervisor use GFS2 to provide the ability to set up thin provisioning with a shared block storage device. Pools that use GFS2 to thin provision their shared block storage are clustered and behave differently to pools that use shared file-based storage or LVM with shared bloc...

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

Code injection

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

Security Bulletin: Vulnerabilities in Bash affect certain IBM N Series products (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and two memory corruption vulnerabilities. Bash is used by IBM N Series products using certain versions of the following: Data...

CVE-2018-1281

The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLCPSROOTURI and DMLCPSROOTPORT env variables. In versions older than 1.0.0, however, the MXNet framework will listen on 0.0.0.0 rather than user specified DMLCPSROOTURI onc...

CVE-2018-1281

The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLCPSROOTURI and DMLCPSROOTPORT env variables. In versions older than 1.0.0, however, the MXNet framework will listen on 0.0.0.0 rather than user specified DMLCPSROOTURI onc...

Design/Logic Flaw

The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLCPSROOTURI and DMLCPSROOTPORT env variables. In versions older than 1.0.0, however, the MXNet framework will listen on 0.0.0.0 rather than user specified DMLCPSROOTURI onc...

CVE-2018-1281

The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLCPSROOTURI and DMLCPSROOTPORT env variables. In versions older than 1.0.0, however, the MXNet framework will listen on 0.0.0.0 rather than user specified DMLCPSROOTURI onc...

CVE-2018-1281

CVE-2018-1281 involves Apache MXNet in clustered deployments. The root cause is that in versions older than 1.0.0, the MXNet scheduler can be made to listen on 0.0.0.0 instead of the user-specified DMLC_PS_ROOT_URI/DMLC_PS_ROOT_PORT when a scheduler node initializes. This misconfiguration causes ...

Design/Logic Flaw

NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in SMB environments...

CVE-2017-14583

NetApp Clustered Data ONTAP (versions 9.x before 9.1P10 and 9.2P2) is affected by CVE-2017-14583, a vulnerability that can cause Denial of Service in SMB environments. The root cause is not explicitly detailed in the provided documents beyond the affected versions and the DoS impact. The CVE refe...

NetApp VASA Provider for Clustered Data ONTAP Information Disclosure Vulnerability

NetApp VASA Provider for Clustered Data ONTAP is a virtual program for VASA for Clustered Data ONTAP storage systems from NetApp, USA. The program is capable of providing communication capabilities between storage arrays. A security vulnerability exists in NetApp VASA Provider for Clustered Data...

Authentication flaw

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials...