CVE-2019-5506

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.

Score

CVSS 3.1 5.9 Medium

Status

Modified - security-alert@netapp.com

Published

2019-10-09

Last modified

2024-08-04

Weaknesses

CWE-295

Affected products

• Clustered Data Ontap (Netapp)

References

• https://security.netapp.com/advisory/ntap-20191009-0003/