netapp element plug-in for vcenter server vulnerabilities and exploits

(subscribe to this query)

Element Plug-in for vCenter Server versions before 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions before 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.

Netapp Hyper Converged Infrastructure Compute Node Netapp Element Plug-in For Vcenter Server

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...

Vmware Spring Boot Netapp Element Plug-in For Vcenter Server Netapp Management Services For Element Software And Netapp Hci Netapp Solidfire \\& Hci Management Node

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenar...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no eno...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Jenkins Jenkins

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....

2 Github repositories

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...

Eclipse Jetty Debian Debian Linux 10.0 Netapp Snap Creator Framework -Netapp Santricity Cloud Connector -Netapp Snapmanager -Netapp E-series Santricity Web Services -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os Controller Netapp Element Plug-in For Vcenter Server -Oracle Communications Services Gatekeeper 7.0 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Siebel Core - Automation Oracle Communications Session Route Manager Oracle Communications Element Manager 8.2.2 Oracle Rest Data Services Oracle Communications Session Report Manager

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...

Eclipse Jetty Netapp Snap Creator Framework -Netapp Solidfire -Netapp Hci Management Node -Netapp E-series Santricity Web Services -Netapp Snapcenter Plug-in -Netapp E-series Santricity Os Controller Netapp Element Plug-in For Vcenter Server -Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Retail Eftlink 20.0.1 Oracle Communications Cloud Native Core Binding Support Function 1.10.0 Oracle Communications Diameter Signaling Router Oracle Communications Cloud Native Core Unified Data Repository 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0 Oracle Rest Data Services Oracle Stream Analytics Oracle Stream Analytics 19c

2 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook