PT-2019-17717 · Netapp · Data Ontap

Published 2019-08-05 · Updated 2021-07-21 · CVE-2019-5502

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Data ONTAP operating in 7-Mode versions prior to 8.2.5P3

Description The issue is related to weak cryptography in SMB, which could lead to information disclosure, or addition or modification of data when exploited.

Recommendations For versions prior to 8.2.5P3, update to version 8.2.5P3 or later to resolve the issue.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-5502

Affected Products

Data Ontap

References · 3

• https://security.netapp.com/advisory/ntap-20190802-0002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5502 · Security Note