CVE-2019-5492

Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.

Score

CVSS 3.0 7.5 High

Status

Modified - security-alert@netapp.com

Published

2019-04-29

Last modified

2024-08-04

Affected products

• Element Plug-in For Vcenter Server (Netapp)
• Hyper Converged Infrastructure Compute Node (Netapp)
• Element Plug-in For Vcenter Server (Netapp Inc.)

References

• http://www.securityfocus.com/bid/108105
• https://security.netapp.com/advisory/ntap-20190426-0001/