CVE-2017-15518: Infoleak
Published Feb 23, 2018
·Updated
All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required.
Affected Software
5 affected components
NetApp OnCommand API Services<=2.0
NetApp Service Level Manager<=1.0
NetApp Service Level Manager=1.0-rc1
NetApp Service Level Manager=1.0-rc2
NetApp Service Level Manager=1.0-rc3
Event History
Feb 23, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2017-15518.
2
What is the severity of CVE-2017-15518?
The severity of CVE-2017-15518 is high.
3
Which software versions are affected by CVE-2017-15518?
All versions of NetApp OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 are affected.
4
How can I fix CVE-2017-15518?
All users are urged to move to a fixed version of NetApp OnCommand API Services and NetApp Service Level Manager.
5
Where can I find more information about CVE-2017-15518?
More information about CVE-2017-15518 can be found at https://security.netapp.com/advisory/NTAP-20180223-0001/