CVE-2019-5491

Published Feb 27, 2019

Last updated 4 years ago

Overview

Description: Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user.
Source: security-alert@netapp.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1BA42632-FBD6-4C99-AB6E-CBB63FA48948",
            "versionEndExcluding": "9.1",
            "versionStartIncluding": "9.0"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C56105FC-6B75-46AC-AAB1-D8EA638C7376"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF102F49-BA1B-48E1-BF99-DA2D5C5DB23A"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3968E29B-3D73-432A-A5DC-D62AFB085D1E"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0EAC99C-418A-45E7-80EB-2CB8FBF0A8B8"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DA6334C1-BD8A-48DA-8DF6-1C5675039506"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB1DBABB-3ABB-4DC5-B296-D289893CD92C"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38CCE9D1-0DC4-43FC-9C63-D34EC01347E9"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "28DE7367-5B30-4AC6-837B-40114E972E15"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0827CECC-BA12-4AA1-9642-B6BC2F44284D"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6885544D-D523-4611-87A4-1C8532E3D1B5"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C40B351-67AE-40A2-A2B5-19A733AF583B"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EE7373C-60D2-442E-9DCC-ED928DE97615"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5204A9BE-432E-4411-B612-12C9A7AD6F64"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C48CBD83-F38E-41E8-9D3A-0181D4214497"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D932AC6D-3554-489C-AE45-F55D66DADD96"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93C8874B-9D5B-4629-AA72-ED893CF5585A"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0FECE5C3-29EC-469B-BB28-3DE79F97DA33"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5B2E220-8FA2-46AD-9507-705391C4A5E9"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2038E75E-4315-4C9F-B4C6-4A4440DCBA89"
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C1ACB5D-2542-4476-917D-67D6E3199EDE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References