NetSight
medium5.9

CVE-2019-5506

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-…

Impact

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.

Affected products

VendorProductAffected versions
NetappClustered Data Ontap
from 9.0 through 9.6
Version 9.6

Weakness classification

References