CVE-2019-5491 - Vulnerability Details

Vendors	Products
Netapp	Clustered Data Ontap

Link	Providers
http://www.securityfocus.com/bid/107183
https://security.netapp.com/advisory/ntap-20190227-0001/

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Clustered Data ONTAP", "vendor": "NetApp", "versions": [{"status": "affected", "version": "Versions 9.0 and higher"}]}], "datePublic": "2019-02-27T00:00:00", "descriptions": [{"lang": "en", "value": "Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user."}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-02-28T10:57:01", "orgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "shortName": "netapp"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20190227-0001/"}, {"name": "107183", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/107183"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-alert@netapp.com", "DATE_PUBLIC": "2019-02-27T00:00:00", "ID": "CVE-2019-5491", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Clustered Data ONTAP", "version": {"version_data": [{"version_value": "Versions 9.0 and higher"}]}}]}, "vendor_name": "NetApp"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure"}]}]}, "references": {"reference_data": [{"name": "https://security.netapp.com/advisory/ntap-20190227-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190227-0001/"}, {"name": "107183", "refsource": "BID", "url": "http://www.securityfocus.com/bid/107183"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T19:54:53.477Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20190227-0001/"}, {"name": "107183", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/107183"}]}]}, "cveMetadata": {"assignerOrgId": "11fdca00-0482-4c88-a206-37f9c182c87d", "assignerShortName": "netapp", "cveId": "CVE-2019-5491", "datePublished": "2019-02-27T17:00:00Z", "dateReserved": "2019-01-07T00:00:00", "dateUpdated": "2024-09-16T17:08:32.691Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Clustered Data ONTAP (string)

vendor : NetApp (string)

versions : [ »

0 : { »

status : affected (string)

version : Versions 9.0 and higher (string)

}

]

}

]

datePublic : 2019-02-27T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Information Disclosure (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-02-28T10:57:01 (string)

orgId : 11fdca00-0482-4c88-a206-37f9c182c87d (string)

shortName : netapp (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

}

1 : { »

name : 107183 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/107183 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security-alert@netapp.com (string)

DATE_PUBLIC : 2019-02-27T00:00:00 (string)

ID : CVE-2019-5491 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Clustered Data ONTAP (string)

version : { »

version_data : [ »

0 : { »

version_value : Versions 9.0 and higher (string)

}

]

}

]

}

vendor_name : NetApp (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Information Disclosure (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

refsource : CONFIRM (string)

url : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

}

1 : { »

name : 107183 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/107183 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T19:54:53.477Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

}

1 : { »

name : 107183 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/107183 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 11fdca00-0482-4c88-a206-37f9c182c87d (string)

assignerShortName : netapp (string)

cveId : CVE-2019-5491 (string)

datePublished : 2019-02-27T17:00:00Z (string)

dateReserved : 2019-01-07T00:00:00 (string)

dateUpdated : 2024-09-16T17:08:32.691Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BA42632-FBD6-4C99-AB6E-CBB63FA48948", "versionEndExcluding": "9.1", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "C56105FC-6B75-46AC-AAB1-D8EA638C7376", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p1:*:*:*:*:*:*", "matchCriteriaId": "FF102F49-BA1B-48E1-BF99-DA2D5C5DB23A", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:*", "matchCriteriaId": "3968E29B-3D73-432A-A5DC-D62AFB085D1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:*", "matchCriteriaId": "B0EAC99C-418A-45E7-80EB-2CB8FBF0A8B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:*", "matchCriteriaId": "DA6334C1-BD8A-48DA-8DF6-1C5675039506", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:*", "matchCriteriaId": "EB1DBABB-3ABB-4DC5-B296-D289893CD92C", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:*", "matchCriteriaId": "38CCE9D1-0DC4-43FC-9C63-D34EC01347E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:*", "matchCriteriaId": "28DE7367-5B30-4AC6-837B-40114E972E15", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:*", "matchCriteriaId": "0827CECC-BA12-4AA1-9642-B6BC2F44284D", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*", "matchCriteriaId": "6885544D-D523-4611-87A4-1C8532E3D1B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:*", "matchCriteriaId": "2C40B351-67AE-40A2-A2B5-19A733AF583B", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:*", "matchCriteriaId": "0EE7373C-60D2-442E-9DCC-ED928DE97615", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:*", "matchCriteriaId": "5204A9BE-432E-4411-B612-12C9A7AD6F64", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:*", "matchCriteriaId": "C48CBD83-F38E-41E8-9D3A-0181D4214497", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:*", "matchCriteriaId": "D932AC6D-3554-489C-AE45-F55D66DADD96", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*", "matchCriteriaId": "32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*", "matchCriteriaId": "93C8874B-9D5B-4629-AA72-ED893CF5585A", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*", "matchCriteriaId": "DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*", "matchCriteriaId": "0FECE5C3-29EC-469B-BB28-3DE79F97DA33", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*", "matchCriteriaId": "B5B2E220-8FA2-46AD-9507-705391C4A5E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*", "matchCriteriaId": "2038E75E-4315-4C9F-B4C6-4A4440DCBA89", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*", "matchCriteriaId": "7C1ACB5D-2542-4476-917D-67D6E3199EDE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user."}, {"lang": "es", "value": "Clustered Data ONTAP, en sus versiones anteriores a la 9.1P15 y las 9.3 anteriores a la 9.3P7,es susceptible a una vulnerabilidad que divulga informaci\u00f3n sensible a un usuario no autenticado."}], "id": "CVE-2019-5491", "lastModified": "2024-11-21T04:45:02.627", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-02-27T17:29:00.317", "references": [{"source": "security-alert@netapp.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/107183"}, {"source": "security-alert@netapp.com", "tags": ["Vendor Advisory"], "url": "https://security.netapp.com/advisory/ntap-20190227-0001/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/107183"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.netapp.com/advisory/ntap-20190227-0001/"}], "sourceIdentifier": "security-alert@netapp.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1BA42632-FBD6-4C99-AB6E-CBB63FA48948 (string)

versionEndExcluding : 9.1 (string)

versionStartIncluding : 9.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:-:*:*:*:*:*:* (string)

matchCriteriaId : C56105FC-6B75-46AC-AAB1-D8EA638C7376 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p1:*:*:*:*:*:* (string)

matchCriteriaId : FF102F49-BA1B-48E1-BF99-DA2D5C5DB23A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:* (string)

matchCriteriaId : 3968E29B-3D73-432A-A5DC-D62AFB085D1E (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:* (string)

matchCriteriaId : B0EAC99C-418A-45E7-80EB-2CB8FBF0A8B8 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:* (string)

matchCriteriaId : DA6334C1-BD8A-48DA-8DF6-1C5675039506 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:* (string)

matchCriteriaId : EB1DBABB-3ABB-4DC5-B296-D289893CD92C (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:* (string)

matchCriteriaId : 38CCE9D1-0DC4-43FC-9C63-D34EC01347E9 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:* (string)

matchCriteriaId : 28DE7367-5B30-4AC6-837B-40114E972E15 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:* (string)

matchCriteriaId : 0827CECC-BA12-4AA1-9642-B6BC2F44284D (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:* (string)

matchCriteriaId : 6885544D-D523-4611-87A4-1C8532E3D1B5 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:* (string)

matchCriteriaId : 2C40B351-67AE-40A2-A2B5-19A733AF583B (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:* (string)

matchCriteriaId : 0EE7373C-60D2-442E-9DCC-ED928DE97615 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:* (string)

matchCriteriaId : 5204A9BE-432E-4411-B612-12C9A7AD6F64 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:* (string)

matchCriteriaId : C48CBD83-F38E-41E8-9D3A-0181D4214497 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:* (string)

matchCriteriaId : D932AC6D-3554-489C-AE45-F55D66DADD96 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:* (string)

matchCriteriaId : 32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:* (string)

matchCriteriaId : 93C8874B-9D5B-4629-AA72-ED893CF5585A (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:* (string)

matchCriteriaId : DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:* (string)

matchCriteriaId : 0FECE5C3-29EC-469B-BB28-3DE79F97DA33 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:* (string)

matchCriteriaId : B5B2E220-8FA2-46AD-9507-705391C4A5E9 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:* (string)

matchCriteriaId : 2038E75E-4315-4C9F-B4C6-4A4440DCBA89 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:* (string)

matchCriteriaId : 7C1ACB5D-2542-4476-917D-67D6E3199EDE (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user. (string)

}

1 : { »

lang : es (string)

value : Clustered Data ONTAP, en sus versiones anteriores a la 9.1P15 y las 9.3 anteriores a la 9.3P7,es susceptible a una vulnerabilidad que divulga información sensible a un usuario no autenticado. (string)

}

]

id : CVE-2019-5491 (string)

lastModified : 2024-11-21T04:45:02.627 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-02-27T17:29:00.317 (string)

references : [ »

0 : { »

source : security-alert@netapp.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/107183 (string)

}

1 : { »

source : security-alert@netapp.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/107183 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20190227-0001/ (string)

}

]

sourceIdentifier : security-alert@netapp.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object