Clustered Data Ontap

Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.

Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-09T14:54:11.754Z

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server.

Published: 2021-11-01T13:16:06.000Z
Updated: 2024-08-03T20:40:46.948Z

Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.

Published: 2021-10-12T17:57:44.000Z
Updated: 2024-08-03T20:40:47.023Z

Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.

Published: 2021-10-19T14:11:58.000Z
Updated: 2024-08-03T20:40:46.933Z

Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Service (DoS) on a cluster node.

Published: 2021-06-04T10:56:36.000Z
Updated: 2024-08-03T20:40:47.249Z

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access.

Published: 2021-03-04T20:47:53.000Z
Updated: 2024-08-03T20:40:46.951Z

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs.

Published: 2021-03-04T20:44:47.000Z
Updated: 2024-08-03T20:40:47.057Z

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Published: 2021-02-08T21:40:43.000Z
Updated: 2024-08-04T10:03:46.214Z

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines (SVMs) and filenames on those SVMs.

Published: 2021-02-03T17:35:47.000Z
Updated: 2024-08-04T10:03:46.121Z

Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Machines (SVMs).

Published: 2021-02-03T17:33:11.000Z
Updated: 2024-08-04T10:03:45.933Z

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled.

Published: 2021-01-19T17:04:11.000Z
Updated: 2024-08-04T10:03:46.240Z

Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster LIF to cause a Denial of Service (DoS).

Published: 2020-10-27T13:47:21.000Z
Updated: 2024-08-04T10:03:46.266Z

Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Published: 2021-02-08T21:38:38.000Z
Updated: 2024-08-04T10:03:46.203Z

Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.

Published: 2020-09-02T19:15:35.000Z
Updated: 2024-08-04T10:03:46.177Z

Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service (DoS).

Published: 2019-10-25T18:02:25.000Z
Updated: 2024-08-04T20:01:50.856Z

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.

Published: 2019-10-09T18:20:00.000Z
Updated: 2024-08-04T20:01:51.447Z