2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"Clustered Data ONTAP","vendor":"NetApp","versions":[{"status":"affected","version":"Versions prior to 9.1P16, 9.3P10 and 9.4P5"}]}],"source":"security-alert@netapp.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*","matchCriteriaId":"34404A93-B9D0-43D9-ACAE-9AA5507357AA","versionEndIncluding":"9.1","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p10:*:*:*:*:*:*","matchCriteriaId":"3968E29B-3D73-432A-A5DC-D62AFB085D1E","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p11:*:*:*:*:*:*","matchCriteriaId":"B0EAC99C-418A-45E7-80EB-2CB8FBF0A8B8","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p12:*:*:*:*:*:*","matchCriteriaId":"DA6334C1-BD8A-48DA-8DF6-1C5675039506","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p13:*:*:*:*:*:*","matchCriteriaId":"EB1DBABB-3ABB-4DC5-B296-D289893CD92C","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p14:*:*:*:*:*:*","matchCriteriaId":"38CCE9D1-0DC4-43FC-9C63-D34EC01347E9","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p15:*:*:*:*:*:*","matchCriteriaId":"9EE80714-E966-4B11-B229-FCC82C3C61AA","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p2:*:*:*:*:*:*","matchCriteriaId":"28DE7367-5B30-4AC6-837B-40114E972E15","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p3:*:*:*:*:*:*","matchCriteriaId":"0827CECC-BA12-4AA1-9642-B6BC2F44284D","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p4:*:*:*:*:*:*","matchCriteriaId":"6885544D-D523-4611-87A4-1C8532E3D1B5","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p5:*:*:*:*:*:*","matchCriteriaId":"2C40B351-67AE-40A2-A2B5-19A733AF583B","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p6:*:*:*:*:*:*","matchCriteriaId":"0EE7373C-60D2-442E-9DCC-ED928DE97615","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p7:*:*:*:*:*:*","matchCriteriaId":"5204A9BE-432E-4411-B612-12C9A7AD6F64","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p8:*:*:*:*:*:*","matchCriteriaId":"C48CBD83-F38E-41E8-9D3A-0181D4214497","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:p9:*:*:*:*:*:*","matchCriteriaId":"D932AC6D-3554-489C-AE45-F55D66DADD96","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D8EEDDA9-0011-4A0C-ADB1-4C49F1C8925E","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.3:p10:*:*:*:*:*:*","matchCriteriaId":"0ECBAC3F-F8C2-4DD0-92CC-947F37B24D54","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.4:p5:*:*:*:*:*:*","matchCriteriaId":"E8A9F744-4822-4A24-B011-3DA7CBAD8D22","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user."},{"lang":"es","value":"Clustered Data ONTAP, en sus versiones anteriores a las 9.1P16, 9.3P10 y 9.4P5, es susceptible a una vulnerabilidad que divulga información sensible a un usuario no autenticado."}],"id":"CVE-2018-5497","lastModified":"2026-06-17T02:00:24.897","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":0.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-24T20:29:00.327","references":[{"source":"security-alert@netapp.com","tags":["Issue Tracking","Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20190109-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"],"url":"https://security.netapp.com/advisory/ntap-20190109-0001/"}],"sourceIdentifier":"security-alert@netapp.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|