CVE-2017-5201

Опубликовано: 10 нояб. 2017

Источник: nvd

CVSS3: 5.7

CVSS2: 2.7

EPSS Низкий

Описание

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064.

Ссылки

http://www.securityfocus.com/bid/101776
Third Party Advisory
VDB Entry
https://security.netapp.com/advisory/ntap-20170809-0001/
Issue Tracking
Vendor Advisory
http://www.securityfocus.com/bid/101776
Third Party Advisory
VDB Entry
https://security.netapp.com/advisory/ntap-20170809-0001/
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netapp:clustered_data_ontap:*:p8:*:*:*:*:*:*

Версия до 8.3.2 (исключая)

cpe:2.3:a:netapp:clustered_data_ontap:9.0:*:*:*:*:*:*:*

cpe:2.3:a:netapp:clustered_data_ontap:9.0:p1:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00124

Низкий

5.7 Medium

CVSS3

2.7 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-j38m-f698-8m6p