PT-2018-16990
CVE-2018-5490
·
Published
2018-08-03
·
Updated
2019-10-03
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NetApp Clustered Data ONTAP versions prior to 8.3 GA
Description
The issue concerns the incorrect enforcement of Read-Only export policy rules, potentially allowing more than read-only access from authenticated SMBv2 and SMBv3 clients. This has been resolved in the GA release.
Recommendations
For versions prior to 8.3 GA, update the system to the NetApp Data ONTAP 8.3 GA release to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾