Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/92329 | Third Party Advisory VDB Entry |
| https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US | Patch Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20160802-0001/ | |
| http://www.securityfocus.com/bid/92329 | Third Party Advisory VDB Entry |
| https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US | Patch Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20160802-0001/ |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/92329 - Third Party Advisory, VDB Entry | |
| References | () https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US - Patch, Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20160802-0001/ - |
Information
Published : 2017-01-11 16:59
Updated : 2024-11-21 02:37
NVD link : CVE-2015-8020
Mitre link : CVE-2015-8020
CVE.ORG link : CVE-2015-8020
JSON object : View
Products Affected
netapp
- clustered_data_ontap
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor