CVE-2018-5490: High severity ibm data ontap vulnerability
Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release candidates (RCs) are requested to update their systems to the NetApp Data ONTAP 8.3 GA release.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5490?
CVE-2018-5490 is classified as a medium severity vulnerability due to improper enforcement of read-only export policy rules.
How do I fix CVE-2018-5490?
To fix CVE-2018-5490, upgrade to the GA release of Clustered Data ONTAP version 8.3 or later.
Which versions are affected by CVE-2018-5490?
CVE-2018-5490 affects Clustered Data ONTAP 8.3 Release Candidate versions.
What type of access does CVE-2018-5490 allow?
CVE-2018-5490 may allow authenticated SMBv2 and SMBv3 clients more than read-only access.
Is there a workaround for CVE-2018-5490?
No official workaround is provided for CVE-2018-5490; upgrading to a fixed version is recommended.