« Volver al listado

CVE-2019-5501

Estado: ModificadaAlta (7.5)—

Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netapp — Data Ontap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-5501",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@netapp.com",
      "affectedData": [
        {
          "vendor": "NetApp",
          "product": "Data ONTAP operating in 7-Mode",
          "versions": [
            {
              "status": "affected",
              "version": "Below 8.2.5P3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-08-02T15:15:12.333",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/ntap-20190801-0001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@netapp.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20190801-0001/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers."
    },
    {
      "lang": "es",
      "value": "Data ONTAP operando en 7-Mode anterior a versión 8.2.5P3, puede revelar información confidencial de la cuenta LDAP a atacantes no autenticados remotos."
    }
  ],
  "lastModified": "2026-06-17T02:37:48.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:data_ontap:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "661AA703-BAFA-4711-B224-CABEFE323BC9",
              "versionEndExcluding": "8.2.5"
            },
            {
              "criteria": "cpe:2.3:o:netapp:data_ontap:8.2.5:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A5B2ACC-885C-487F-95F6-B67983E9E255"
            },
            {
              "criteria": "cpe:2.3:o:netapp:data_ontap:8.2.5:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC3377B6-1732-4A2B-98BC-21AA79812363"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@netapp.com"
}