PT-2019-17709 · Netapp+1 · Netapp Hci Compute Node+2

Martijn De Jong · Published 2019-04-29 · Updated 2020-08-24 · CVE-2019-5492

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Element Plug-in for vCenter Server versions prior to 4.2.3 NetApp HCI Compute Node versions prior to 1.4P2

Description The issue may disclose sensitive account information to an unauthenticated attacker.

Recommendations For Element Plug-in for vCenter Server versions prior to 4.2.3, update to version 4.2.3 or later. For NetApp HCI Compute Node versions prior to 1.4P2, update to version 1.4P2 or later.

Fix

Related Identifiers

CVE-2019-5492

Affected Products

Element Plug-In For Vcenter Server

Netapp Hci Compute Node

Vcenter Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-5492 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5492 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190426-0001 · Vendor Advisory
• http://securityfocus.com/bid/108105 · Note