CVE-2017-7568: Infoleak
Published Jun 22, 2018
·Updated
NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface.
Affected Software
1 affected component
NetApp OnCommand Unified Manager<5.2.3
Event History
Jun 22, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7568?
CVE-2017-7568 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-7568?
To mitigate CVE-2017-7568, upgrade to NetApp OnCommand Unified Manager version 5.2.3 or later.
3
What types of information are affected by CVE-2017-7568?
CVE-2017-7568 may expose sensitive LDAP account information to authenticated users.
4
Who is affected by CVE-2017-7568?
CVE-2017-7568 affects users of NetApp OnCommand Unified Manager versions prior to 5.2.3.
5
What action may trigger the vulnerability CVE-2017-7568?
The vulnerability CVE-2017-7568 can be triggered when testing the LDAP authentication configuration via the user interface.