Unscored CVE-2020-8590 EUVD-2020-29438GHSA-3mhw-mxm8-w9rh

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node …

Published Feb 8, 2021 · Updated Aug 4, 2024 · Assigned by netapp

Description

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Affected products

Vendor	Product	Affected	Fixed
—	Clustered Data ONTAP	Versions prior to 9.1P18 and 9.3P12	—

References

https://security.netapp.com/advisory/NTAP-20210208-0003/