PT-2017-7313 · Netapp · Clustered Data Ontap

Publicado 2017-01-11 · Atualizado 2017-11-16 · CVE-2015-8020

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2

Description The issue concerns a default privileged account in Clustered Data ONTAP that can be exploited under certain conditions for unauthorized information disclosure.

Recommendations For Clustered Data ONTAP version 8.0, update the configuration to secure or remove the default privileged account. For Clustered Data ONTAP version 8.3.1, update the configuration to secure or remove the default privileged account. For Clustered Data ONTAP version 8.3.2, update the configuration to secure or remove the default privileged account.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-8020

Produtos afetados

Clustered Data Ontap

Referências · 5

• https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8020 · Nota
• http://securityfocus.com/bid/92329 · Nota
• https://security.netapp.com/advisory/ntap-20160802-0001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8020 · Nota de Segurança