medium6.5
CVE-2017-8919
NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated use…
Impact
NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Oncommand Api Services | through 1.2 |