Information Disclosure Vulnerability in NetApp Data ONTAP Versions
CVE-2019-5493

7.5HIGH

Key Information:

Vendor

Netapp

Status
Data Ontap Operating In 7-mode
Vendor
CVE Published:
2 August 2019

What is CVE-2019-5493?

NetApp Data ONTAP operating in 7-Mode versions earlier than 8.2.5P3 is vulnerable to an information disclosure flaw that could be exploited by an unauthenticated attacker. The attack requires the activation of multiple non-default configurations, potentially allowing unauthorized access to sensitive information. Administrators should review their system settings to mitigate this risk and apply relevant patches to protect their environments.

Affected Version(s)

Data ONTAP operating in 7-Mode Below 8.2.5P3

References

https://security.netapp.com/advisory/ntap-20190801-0002/
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-5493 : Information Disclosure Vulnerability in NetApp Data ONTAP Versions