CVE-2019-5504
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - security-alert@netapp.com
- Published
- 2019-09-24
- Last modified
- 2024-08-04
- Weaknesses
- CWE-306
Affected products
References
- https://security.netapp.com/advisory/ntap-20190923-0001/
