Vulnerability fixed in Netapp products

A vulnerability has been fixed in Jackson databind, used by several Netapp products. The vulnerability allows a malicious party to execute arbitrary code under the user's privileges and to obtain sensitive data. The vulnerabilities stem from the failure to adequately validate user input prior to...

NetApp Netapp E-Series SANtricity OS Controller Software Information Disclosure Vulnerability

NetApp Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from American NetApp. A security vulnerability exists in SANtricity OS Controller Software version 11.50.1 and later versions, which can be exploited by an attacker to discover sensitive information by...

NetApp SANtricity OS Controller Software Denial of Service Vulnerability

NetApp Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from American NetApp. A denial of service vulnerability exists in SANtricity OS Controller Software version 11.30 and later versions, which originated from a vulnerability that could be exploited by an...

Release Information for NetApp Element Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp Element Plug-In v1.0.13, ensure that you are running Veeam Backup & Replication...

Vulnerabilities fixed in NetApp products

NetApp has fixed vulnerabilities in several products. The vulnerabilities allow an unauthenticated remote malicious person to remotely able to obtain system information and to launch a Cross-Site Scripting attack. NetApp has made updates available for Django. See "Possible Solutions" for more...

NetApp SANtricity OS Controller Software Vulnerabilities - Lenovo Support US

No description provided...

NetApp Clustered Data ONTAP 9.7.x Vulnerability - Lenovo Support US

No description provided...

Multiple vulnerabilities fixed in NetApp products

NetApp developers have fixed several vulnerabilities that could lead to a denial-of-service DoS attack and the obtaining sensitive information. NetApp developers have released updates to fix the vulnerabilities. More information can be found on the pages below:...

NetApp Clustered Data ONTAP Denial of Service Vulnerability (CNVD-2020-59700)

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. A denial of service vulnerability exists in Clustered Data ONTAP versions 9.7 through 9.7P7. An attacker with access to inter-cluster LIFs could exploit this vulnerability to caus...

PT-2020-20221

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 9.7 through 9.7P7 Description The issue allows an attacker with access to an intercluster LIF to cause a Denial of Service DoS. Recommendations For versions 9.7 through 9.7P7, update to a version outside of...

PT-2020-20219

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 9.3P19 NetApp Clustered Data ONTAP versions prior to 9.5P14 NetApp Clustered Data ONTAP versions prior to 9.6P9 NetApp Clustered Data ONTAP versions prior to 9.7 Description The issue could lead to...

Vulnerabilities fixed in Python

Vulnerabilities have been fixed in Python. The vulnerabilities among other things allow an unauthenticated remote malicious person to remotely capable of causing a denial of service. Python has released updates to fix the vulnerabilities. More information can be found on the pages below:...

NetApp Active IQ Unified Manager Denial of Service Vulnerability

NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager VMware vSphere and...

NetApp Active IQ Unified Manager Code Execution Vulnerability

NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager versions prior to 9.6 J...

"Reprotect storage volumes after failover" operation fails during storage plan execution

Challenge If you enable the "Trigger reverse replication to reprotect the failed-over volumes" option when running a storage plan, Veeam Recovery Orchestrator triggers the operation of resynchronizing the SnapMirror relationship in the reverse direction. In a reverse resynchronization operation,...

CVE-2020-8573

The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers BMC are shipped with a documented default account and password that should be changed during the initial node setup. During upgrades to Element 11.8 and 12.0 or the Compute Firmware Bundle 12.2.92 the BMC account password on t...

Default credentials

The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers BMC are shipped with a documented default account and password that should be changed during the initial node setup. During upgrades to Element 11.8 and 12.0 or the Compute Firmware Bundle 12.2.92 the BMC account password on t...

CVE-2020-8573

The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers BMC are shipped with a documented default account and password that should be changed during the initial node setup. During upgrades to Element 11.8 and 12.0 or the Compute Firmware Bundle 12.2.92 the BMC account password on t...

CVE-2020-8573

The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers BMC are shipped with a documented default account and password that should be changed during the initial node setup. During upgrades to Element 11.8 and 12.0 or the Compute Firmware Bundle 12.2.92 the BMC account password on t...

CVE-2020-8573

NetApp HCI BMCs (H610C, H615C, H610S) ship with a documented default account/password. During upgrades to Element 11.8/12.0 or Compute Firmware Bundle 12.2.92, the BMC password is reset to the default, which could allow remote attackers to cause a Denial of Service (DoS). This cobalt of informati...