ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account.
References
Link | Resource |
---|---|
https://security.netapp.com/advisory/ntap-20191121-0001/ | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2019-11-21 16:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-5509
Mitre link : CVE-2019-5509
CVE.ORG link : CVE-2019-5509
JSON object : View
Products Affected
netapp
- ontap_select_deploy_administration_utility
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')