Data Disclosure Vulnerability in NetApp Data ONTAP 7-Mode
CVE-2019-5501

7.5HIGH

Key Information:

Vendor

Netapp

Status
Data Ontap Operating In 7-mode
Vendor
CVE Published:
2 August 2019

What is CVE-2019-5501?

An information disclosure vulnerability exists in NetApp Data ONTAP operating in 7-Mode, which could allow unauthenticated remote attackers to access sensitive LDAP account information. Versions prior to 8.2.5P3 are specifically affected, raising concerns for organizations relying on this software for data management and storage solutions.

Affected Version(s)

Data ONTAP operating in 7-Mode Below 8.2.5P3

References

https://security.netapp.com/advisory/ntap-20190801-0001/
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-5501 : Data Disclosure Vulnerability in NetApp Data ONTAP 7-Mode