NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Oncommand_unified_manager_for_clustered_data_ontap | Netapp | 6.3 (including) | 6.3 (including) |
| Oncommand_unified_manager_for_clustered_data_ontap | Netapp | 6.4 (including) | 6.4 (including) |
| Oncommand_unified_manager_for_clustered_data_ontap | Netapp | 6.4-p1 (including) | 6.4-p1 (including) |