CVE-2016-6904

Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials.
References
Link Resource
https://security.netapp.com/advisory/ntap-20171208-0002/ Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:netapp:vasa_provider:*:*:*:*:*:clustered_data_ontap:*:*

History

No history.

Information

Published : 2017-12-11 15:29

Updated : 2023-12-10 12:15


NVD link : CVE-2016-6904

Mitre link : CVE-2016-6904

CVE.ORG link : CVE-2016-6904


JSON object : View

Products Affected

netapp

  • vasa_provider
CWE
CWE-255

Credentials Management Errors