PT-2017-9028 · Netapp · Metrocluster Tiebreaker

Published 2017-01-11 · Updated 2017-11-16 · CVE-2016-6820

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MetroCluster Tiebreaker for clustered Data ONTAP versions prior to 1.2

Description The issue discloses sensitive information in cleartext, which may be viewed by an unauthenticated user.

Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-6820

Affected Products

Metrocluster Tiebreaker

References · 5

• https://osv.dev/vulnerability/CVE-2016-6820 · Vendor Advisory
• https://kb.netapp.com/support/s/article/cve-2016-6820-sensitive-information-disclosure-in-metrocluster-tiebreaker-for-clustered-data-ontap?language=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6820 · Security Note
• https://security.netapp.com/advisory/ntap-20160816-0001 · Note
• http://securityfocus.com/bid/92495 · Note