CVE Catalog
CVE-2015-7746
CriticalSummary
NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.
Risk Assessment
Attackers may gain access to sensitive data or make unauthorized changes to volumes, potentially leading to serious data security breaches.
Recommendation
It is recommended to upgrade NetApp Data ONTAP to version 8.2.4 or later to mitigate this vulnerability.
Original NVD description (English source)
NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.