PT-2017-8713 · Netapp · Data Ontap

Publicado 2017-03-01 · Atualizado 2017-03-14 · CVE-2016-5374

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 9.0 through 9.1 before 9.1P1

Description The issue allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions. This is due to improper handling of the owner rights ACL entry.

Recommendations For versions 9.0 through 9.1 before 9.1P1, update to version 9.1P1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-5374

Produtos afetados

Data Ontap

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-5374 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5374 · Aviso do Fabricante
• http://securityfocus.com/bid/96524 · Nota
• https://kb.netapp.com/support/s/article/ka51A00000007IBQAY/NTAP-20170228-0002?language=en_US · Aviso do Fabricante