CVE-2017-7439

High

Published: 26/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via error messages.

Risk Assessment

Attackers may exploit this vulnerability to disclose confidential data, potentially leading to further attacks on the system.

Recommendation

It is recommended to upgrade to version 5.2.2P1 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in NetApp OnCommand Unified Manager Core Package

CVE-2017-7236High
SQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Original NVD description (English source)

NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to obtain sensitive information via vectors involving error messages.