PT-2017-7313 · Netapp · Clustered Data Ontap

Published 2017-01-11 · Updated 2017-11-16 · CVE-2015-8020

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2

Description The issue concerns a default privileged account in Clustered Data ONTAP that can be exploited under certain conditions for unauthorized information disclosure.

Recommendations For Clustered Data ONTAP version 8.0, update the configuration to secure or remove the default privileged account. For Clustered Data ONTAP version 8.3.1, update the configuration to secure or remove the default privileged account. For Clustered Data ONTAP version 8.3.2, update the configuration to secure or remove the default privileged account.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8020

Affected Products

Clustered Data Ontap

References · 5

• https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8020 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8020 · Note
• http://securityfocus.com/bid/92329 · Note
• https://security.netapp.com/advisory/ntap-20160802-0001 · Note