Netapp: >> Ontap Select Deploy Administration Utility >> 2.12 Security Vulnerabilities
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account.
CVSS Score
9.8
EPSS Score
0.015
Published
2019-11-21
All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges.
CVSS Score
7.2
EPSS Score
0.005
Published
2019-11-21
ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions.
CVSS Score
9.8
EPSS Score
0.012
Published
2019-09-24
ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext.
CVSS Score
9.8
EPSS Score
0.002
Published
2019-09-24