CVE-2017-7947

MEDIUM

Netapp Clustered Data Ontap - Information Disclosure

Title source: rule

Description

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line.

References (1)

[Vendor Advisory] https://kb.netapp.com/support/s/article/NTAP-20170630-0001

Scores

CVSS v3 6.5

EPSS 0.0029

EPSS Percentile 52.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (4)

netapp/clustered_data_ontap

n/a/n/a

Published Jul 17, 2017

Tracked Since Feb 18, 2026