CVE-2017-7439

HIGH

NetApp OnCommand Unified Manager Core Package 5.x - Exposure of Sensitive Information via Error Messages

Title source: llm

Description

NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via vectors involving error messages.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

https://kb.netapp.com/support/s/article/NTAP-20170517-0002

Scores

CVSS v3 7.5

EPSS 0.0188

EPSS Percentile 76.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (7)

netapp/oncommand_unified_manager_core_package 5.0

netapp/oncommand_unified_manager_core_package 5.0.1

netapp/oncommand_unified_manager_core_package 5.0.2

netapp/oncommand_unified_manager_core_package 5.1

netapp/oncommand_unified_manager_core_package 5.2

netapp/oncommand_unified_manager_core_package 5.2.1

netapp/oncommand_unified_manager_core_package 5.2.2

Published May 26, 2017

Tracked Since Feb 18, 2026