CVE-2017-12420

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

Heap overflow

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2017-7947

CVE-2017-7947 affects NetApp Clustered Data ONTAP prior to 8.3.2P11, 9.0 prior to P4, and 9.1 prior to P5, enabling attackers to obtain sensitive password information by abusing how passwords entered on the command line are logged non-interactively. Root cause reported in connected documents is p...

How to Upgrade Citrix Endpoint Management (XenMobile) Servers in a Cluster

This document explains how to upgrade Citrix Endpoint Management XenMobile servers in a clustered environment...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

Design/Logic Flaw

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3997

NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of service by leveraging failure to enable SMB signing enforcement in its default state...

CVE-2016-3997

NetApp CVE-2016-3997 affects Clustered Data ONTAP (N series) where SMB signing is not enforced by default, enabling MITM attacks that can disclose data, escalate privileges, or cause DoS. Root cause: SMB implementation fails to require signing by default. Impact: information disclosure, privilege...

NetApp Clustered Data ONTAP Man-in-the-Middle Attack Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A man-in-the-middle attack vulnerability exists in the default...

IBM Clustered Data ONTAP Man-in-the-Middle Security Bypass Vulnerability

IBM Clustered Data ONTAP is the IBM Extreme Bus Schedule. A security bypass vulnerability exists in IBM Clustered Data ONTAP. An attacker could perform unauthorized operations by conducting a man-in-the-middle attack...

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP Information Disclosure Vulnerability

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP are both products of the U.S. company NetApp. The former is a set of software for monitoring, managing and optimizing the performance of data storage in Data ONTAP cluster environments; the latter is...

Design/Logic Flaw

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation aka JMX RMI service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-7345

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation aka JMX RMI service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-5988

CVE-2017-5988 affects NetApp Clustered Data ONTAP 8.1–9.1P1 when NFS/SMB are enabled; remote attackers can cause a denial of service via unspecified vectors. Underlying cause and specific exploit details are not provided in the supplied documents; remediation/patch information is not included.

CVE-2017-7345

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation aka JMX RMI service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2017-7345

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP prior to version 7.1P1 are affected by an information-disclosure vulnerability caused by not properly binding the JMX RMI service to the network. This allows remote attackers to obtain sensitive informatio...

NetApp OnCommUnified Manager for Clustered Data ONTAP Arbitrary Code Execution Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. NetApp OnCommand Unified Manager for Clustered Data ONTAP versions 6.3-6.4p1 include a default privileged account for unified management that allows remote attackers to execute arbitrary code...

Code injection

NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors...