netapp plug-in vulnerabilities and exploits

(subscribe to this query)

605

VMScore

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation.

Netapp Netapp Plug-in

NA

SnapCenter Plugin for VMware vSphere versions 4.6 before 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.

Netapp Snapcenter Plug-in

187

VMScore

AltaVault OST Plug-in versions before 1.2.2 may allow malicious users to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a preca...

Netapp Altavault Ost Plug-in

445

VMScore

Element Plug-in for vCenter Server versions before 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions before 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.

Netapp Hyper Converged Infrastructure Compute Node Netapp Element Plug-in For Vcenter Server

668

VMScore

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...

Vmware Spring Boot Netapp Element Plug-in For Vcenter Server Netapp Management Services For Element Software And Netapp Hci Netapp Solidfire \\& Hci Management Node

NA

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to pote...

Gnu Glibc Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Ontap Select Deploy Administration Utility -Netapp E-series Performance Analyzer -Netapp Nfs Plug-in Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

1 Github repository

357

VMScore

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenar...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -

446

VMScore

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no eno...

Eclipse Jetty Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Element Plug-in For Vcenter Server -Netapp Management Services For Element Software And Netapp Hci -Jenkins Jenkins

605

VMScore

The TLS protocol 1.2 and previous versions supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and ser...

Ietf Transport Layer Security Netapp Snap Creator Framework -Netapp Data Ontap Edge -Netapp Snapdrive -Netapp Snapmanager -Netapp Smi-s Provider -Netapp Host Agent -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Oncommand Shift -Netapp Plug-in For Symantec Netbackup -Netapp System Setup -

446

VMScore

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....

2 Github repositories

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook