Information Disclosure Vulnerability in NetApp Data ONTAP Versions

CVE-2019-5493

Summary

NetApp Data ONTAP operating in 7-Mode versions earlier than 8.2.5P3 is vulnerable to an information disclosure flaw that could be exploited by an unauthenticated attacker. The attack requires the activation of multiple non-default configurations, potentially allowing unauthorized access to sensitive information. Administrators should review their system settings to mitigate this risk and apply relevant patches to protect their environments.

References