CVE-2017-15517

MEDIUM

NetApp AltaVault OST Plug-in < 1.2.2 - Exposure of Sensitive Information

Title source: llm
STIX 2.1

Description

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20171116-0001/

Scores

CVSS v3 5.5
EPSS 0.0018
EPSS Percentile 39.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
NetApp/AltaVault OST Plug-in Versions prior to 1.2.2
netapp/altavault_ost_plug-in < 1.2.2
Published Nov 17, 2017
Tracked Since Feb 18, 2026