PT-2018-16990
CVE-2018-5490
·
Publicado
2018-08-03
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NetApp Clustered Data ONTAP versions prior to 8.3 GA
Description
The issue concerns the incorrect enforcement of Read-Only export policy rules, potentially allowing more than read-only access from authenticated SMBv2 and SMBv3 clients. This has been resolved in the GA release.
Recommendations
For versions prior to 8.3 GA, update the system to the NetApp Data ONTAP 8.3 GA release to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾