PT-2017-12549 · Netapp · Netapp Clustered Data Ontap

Published 2017-09-01 · Updated 2019-10-03 · CVE-2017-12423

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions 8.3.x through 8.3.2P11

Description The issue allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors.

Recommendations For versions 8.3.x through 8.3.2P11, update to version 8.3.2P12 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-12423

Affected Products

Netapp Clustered Data Ontap

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-12423 · Security Note
• https://kb.netapp.com/support/s/article/NTAP-20170831-0002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-12423 · Vendor Advisory