PT-2019-17719
CVE-2019-5504
·
Published
2019-09-24
·
Updated
2021-07-21
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ONTAP Select Deploy administration utility versions 2.12 through 2.12.1
Description
The issue allows unauthenticated remote attackers to perform administrative actions due to an HTTP service bound to the network.
Recommendations
For versions 2.12 through 2.12.1, consider restricting access to the HTTP service to prevent unauthenticated remote attacks until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾