Multiple NetApp Products CVE-2019-5492 Information Disclosure Vulnerability

Bugtraq ID:	108105
Class:	Design Error
CVE:	CVE-2019-5492
Remote:	Yes
Local:	No
Published:	Apr 26 2019 12:00AM
Updated:	Apr 26 2019 12:00AM
Credit:	Martijn de Jong from Spirit Energy
Vulnerable:	NetApp HCI 1.4 NetApp Element Plug-in 0
Not Vulnerable:	NetApp HCI 1.4 P2 NetApp Element Plug-in 4.2.3

Multiple NetApp Products CVE-2019-5492 Information Disclosure Vulnerability

Multiple NetApp Products are prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

The following products and versions are vulnerable:

NetApp Element Plug-in prior to 4.2.3
NetApp HCI prior to 1.4P2

Multiple NetApp Products CVE-2019-5492 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple NetApp Products CVE-2019-5492 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple NetApp Products CVE-2019-5492 Information Disclosure Vulnerability

References:

• NetApp Homepage (NetApp)
  
• CVE-2019-5492 Sensitive Information Disclosure Vulnerability in Element Plug-in ()