NetApp Clustered Data ONTAP CVE-2019-5491 Unspecified Information Disclosure Vulnerability

Bugtraq ID:	107183
Class:	Design Error
CVE:	CVE-2019-5491
Remote:	Yes
Local:	No
Published:	Feb 27 2019 12:00AM
Updated:	Feb 27 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	NetApp Clustered Data ONTAP 9.3 NetApp Clustered Data ONTAP 9.1P9 NetApp Clustered Data ONTAP 9.1P2 NetApp Clustered Data ONTAP 9.1P10 NetApp Clustered Data ONTAP 9.1P1 NetApp Clustered Data ONTAP 9.1 NetApp Clustered Data ONTAP 9.0
Not Vulnerable:	NetApp Clustered Data ONTAP 9.3P7 NetApp Clustered Data ONTAP 9.1P15

NetApp Clustered Data ONTAP CVE-2019-5491 Unspecified Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

NetApp Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are vulnerable.

NetApp Clustered Data ONTAP CVE-2019-5491 Unspecified Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NetApp Clustered Data ONTAP CVE-2019-5491 Unspecified Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

NetApp Clustered Data ONTAP CVE-2019-5491 Unspecified Information Disclosure Vulnerability

References:

• NetApp Homepage (NetApp)
  
• CVE-2019-5491 SMB Information Disclosure Vulnerability in Clustered Data ONTAP (NetApp )