CVE-2017-8919 | BDVDB-2026-88113 Detail

Description#

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/99957
https://kb.netapp.com/support/s/article/ka51A0000008Spy/NTAP-20170718-0001

Exploit#

No public exploit known

History#

Version 12017-07-25Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.