{"affected":[{"affectedData":[{"product":"Clustered Data ONTAP","vendor":"NetApp","versions":[{"status":"affected","version":"Versions 9.0 and higher"}]}],"source":"security-alert@netapp.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*","matchCriteriaId":"1BA42632-FBD6-4C99-AB6E-CBB63FA48948","versionEndExcluding":"9.1","versionStartIncluding":"9.0","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:-:*:*:*:*:*:*","matchCriteriaId":"C56105FC-6B75-46AC-AAB1-D8EA638C7376","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p1:*:*:*:*:*:*","matchCriteriaId":"FF102F49-BA1B-48E1-BF99-DA2D5C5DB23A","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:*","matchCriteriaId":"3968E29B-3D73-432A-A5DC-D62AFB085D1E","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:*","matchCriteriaId":"B0EAC99C-418A-45E7-80EB-2CB8FBF0A8B8","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:*","matchCriteriaId":"DA6334C1-BD8A-48DA-8DF6-1C5675039506","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:*","matchCriteriaId":"EB1DBABB-3ABB-4DC5-B296-D289893CD92C","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:*","matchCriteriaId":"38CCE9D1-0DC4-43FC-9C63-D34EC01347E9","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:*","matchCriteriaId":"28DE7367-5B30-4AC6-837B-40114E972E15","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:*","matchCriteriaId":"0827CECC-BA12-4AA1-9642-B6BC2F44284D","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*","matchCriteriaId":"6885544D-D523-4611-87A4-1C8532E3D1B5","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:*","matchCriteriaId":"2C40B351-67AE-40A2-A2B5-19A733AF583B","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:*","matchCriteriaId":"0EE7373C-60D2-442E-9DCC-ED928DE97615","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:*","matchCriteriaId":"5204A9BE-432E-4411-B612-12C9A7AD6F64","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:*","matchCriteriaId":"C48CBD83-F38E-41E8-9D3A-0181D4214497","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:*","matchCriteriaId":"D932AC6D-3554-489C-AE45-F55D66DADD96","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:-:*:*:*:*:*:*","matchCriteriaId":"32B7A7A6-AFC0-47D2-AE92-A1751B7F0D34","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p1:*:*:*:*:*:*","matchCriteriaId":"93C8874B-9D5B-4629-AA72-ED893CF5585A","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p2:*:*:*:*:*:*","matchCriteriaId":"DDDA828E-8DE6-4BFA-9CB4-DD22B3FD0495","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p3:*:*:*:*:*:*","matchCriteriaId":"0FECE5C3-29EC-469B-BB28-3DE79F97DA33","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p4:*:*:*:*:*:*","matchCriteriaId":"B5B2E220-8FA2-46AD-9507-705391C4A5E9","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p5:*:*:*:*:*:*","matchCriteriaId":"2038E75E-4315-4C9F-B4C6-4A4440DCBA89","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p6:*:*:*:*:*:*","matchCriteriaId":"7C1ACB5D-2542-4476-917D-67D6E3199EDE","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user."},{"lang":"es","value":"Clustered Data ONTAP, en sus versiones anteriores a la 9.1P15 y las 9.3 anteriores a la 9.3P7,es susceptible a una vulnerabilidad que divulga información sensible a un usuario no autenticado."}],"id":"CVE-2019-5491","lastModified":"2026-06-17T02:37:47.330","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-02-27T17:29:00.317","references":[{"source":"security-alert@netapp.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/107183"},{"source":"security-alert@netapp.com","tags":["Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20190227-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/107183"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20190227-0001/"}],"sourceIdentifier":"security-alert@netapp.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}