PT-2017-8713 · Netapp · Data Ontap

Published 2017-03-01 · Updated 2017-03-14 · CVE-2016-5374

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions 9.0 through 9.1 before 9.1P1

Description The issue allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions. This is due to improper handling of the owner rights ACL entry.

Recommendations For versions 9.0 through 9.1 before 9.1P1, update to version 9.1P1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-5374

Affected Products

Data Ontap

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-5374 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5374 · Vendor Advisory
• https://kb.netapp.com/support/s/article/ka51A00000007IBQAY/NTAP-20170228-0002?language=en_US · Vendor Advisory
• http://securityfocus.com/bid/96524 · Note