VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 23, 2018· Updated Jun 17, 2026

CVE-2017-15518

CVE-2017-15518

Description

All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required.

Affected products

8
  • NetApp/Oncommand API Services2 versions
    cpe:2.3:a:netapp:oncommand_api_services:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netapp:oncommand_api_services:*:*:*:*:*:*:*:*range: <=2.0
    • (no CPE)range: <2.1
  • NetApp/Service Level Manager5 versions
    cpe:2.3:a:netapp:service_level_manager:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:netapp:service_level_manager:*:*:*:*:*:*:*:*range: <=1.0
    • cpe:2.3:a:netapp:service_level_manager:1.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:netapp:service_level_manager:1.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:netapp:service_level_manager:1.0:rc3:*:*:*:*:*:*
    • (no CPE)range: <1.0RC4
  • NetApp/OnCommand API Services and NetApp Service Level Managerv5
    Range: Versions prior to 2.1 and 1.0RC4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.