CVE-2019-5491: High severity ibm data ontap vulnerability
Published Feb 27, 2019
·Updated
Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user.
Affected Software
23 affected components
NetApp Clustered Data ONTAP>=9.0<9.1
NetApp Clustered Data ONTAP=9.1
NetApp Clustered Data ONTAP=9.1-p1
NetApp Clustered Data ONTAP=9.1-p10
NetApp Clustered Data ONTAP=9.1-p11
NetApp Clustered Data ONTAP=9.1-p12
NetApp Clustered Data ONTAP=9.1-p13
NetApp Clustered Data ONTAP=9.1-p14
NetApp Clustered Data ONTAP=9.1-p2
NetApp Clustered Data ONTAP=9.1-p3
NetApp Clustered Data ONTAP=9.1-p4
NetApp Clustered Data ONTAP=9.1-p5
NetApp Clustered Data ONTAP=9.1-p6
NetApp Clustered Data ONTAP=9.1-p7
NetApp Clustered Data ONTAP=9.1-p8
NetApp Clustered Data ONTAP=9.1-p9
NetApp Clustered Data ONTAP=9.3
NetApp Clustered Data ONTAP=9.3-p1
NetApp Clustered Data ONTAP=9.3-p2
NetApp Clustered Data ONTAP=9.3-p3
NetApp Clustered Data ONTAP=9.3-p4
NetApp Clustered Data ONTAP=9.3-p5
NetApp Clustered Data ONTAP=9.3-p6
Event History
Feb 27, 2019
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Data Sourced
via NVD·05:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-5491?
CVE-2019-5491 is classified as a high severity vulnerability due to its potential to disclose sensitive information to unauthenticated users.
2
How do I fix CVE-2019-5491?
To fix CVE-2019-5491, upgrade to Clustered Data ONTAP version 9.1P15 or 9.3P7 or later.
3
What versions of clustered Data ONTAP are affected by CVE-2019-5491?
CVE-2019-5491 affects Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7.
4
Who is impacted by CVE-2019-5491?
Organizations using affected versions of Clustered Data ONTAP that have not implemented the recommended updates are at risk due to CVE-2019-5491.
5
Is CVE-2019-5491 easily exploitable?
Yes, CVE-2019-5491 can be easily exploited by an unauthenticated user, making it a significant security concern.