Design/Logic Flaw

2017-04-1015:59:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
clustered_data_ontaple7.1

CPE	Name	Operator	Version
	clustered_data_ontap	le	7.1

References

www.securityfocus.com/bid/97537

kb.netapp.com/support/s/article/NTAP-20170331-0002