high7.5
CVE-2019-5492
Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker.
Impact
Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Hyper Converged Infrastructure Compute Node | through 1.4 |
| Netapp | Element Plug-In For Vcenter Server | before 4.2.3 |