PT-2019-17708 · Netapp · Netapp Clustered Data Ontap

Published 2019-02-27 · Updated 2020-08-24 · CVE-2019-5491

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 9.1P15 NetApp Clustered Data ONTAP versions 9.3 prior to 9.3P7

Description The issue allows sensitive information to be disclosed to an unauthenticated user.

Recommendations For versions prior to 9.1P15, update to version 9.1P15 or later. For versions 9.3 prior to 9.3P7, update to version 9.3P7 or later.

Fix

Related Identifiers

CVE-2019-5491

Affected Products

Netapp Clustered Data Ontap

References · 4

• https://osv.dev/vulnerability/CVE-2019-5491 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5491 · Security Note
• https://security.netapp.com/advisory/ntap-20190227-0001 · Vendor Advisory
• http://securityfocus.com/bid/107183 · Note