Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtai

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
netapp

Description

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetApp VASA Provider for Clustered Data ONTAP

  • Versions prior to 7.0P1affected

References