CVE-2017-15518 All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Si...
HighCVSS 7.8
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp oncommand api services | <= 2.0 | No fix listed |
| netapp service level manager | <= 1.0 | No fix listed |
| netapp service level manager | = 1.0-rc1 | No fix listed |
| netapp service level manager | = 1.0-rc2 | No fix listed |
| netapp service level manager | = 1.0-rc3 | No fix listed |
| netapp OnCommand API Services and NetApp Service Level Manager | = Versions prior to 2.1 and 1.0RC4 | No fix listed |
References
- security.netapp.com vendor-advisory