Skip to content
OpenAdvisories
Unscored CVE-2016-6904 EUVD-2016-7789GHSA-p52f-9xgh-mjcf

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could a…

Published Dec 11, 2017 · Updated Sep 17, 2024 · Assigned by netapp

Vendor: NETAPP Product: VASA Provider for Clustered Data ONTAP

Description

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials.

Affected products

VendorProductAffectedFixed
NetApp VASA Provider for Clustered Data ONTAP Versions prior to 7.0P1 —

References