VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 9, 2019· Updated Jun 17, 2026

CVE-2019-5506

CVE-2019-5506

Description

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.

Affected products

6
  • NetApp/Clustered Data Ontap5 versions
    cpe:2.3:o:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:netapp:clustered_data_ontap:*:*:*:*:*:*:*:*range: >=9.0,<=9.6
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p1:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p2:*:*:*:*:*:*
    • cpe:2.3:o:netapp:clustered_data_ontap:9.6:p3:*:*:*:*:*:*
    • (no CPE)range: >=9.0
  • Clustered/Data ONTAPdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.