CVE-2017-5201

MEDIUM

NetApp Clustered Data ONTAP <8.3.2P8 & 9.0 <P2 - Info Disclosure

Title source: llm

Description

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101776

Issue Tracking, Vendor Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20170809-0001/

Scores

CVSS v3 5.7

EPSS 0.0012

EPSS Percentile 31.1%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

netapp/clustered_data_ontap 9.0 (2 CPE variants)

netapp/clustered_data_ontap < 8.3.2

Published Nov 10, 2017

Tracked Since Feb 18, 2026