CVE-2019-5509

published 2019-11-21

CVE-2019-5509: ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
netapp	ontap_select_deploy_administration_utility	—	—
netapp	ontap_select_deploy_administration_utility	2.11.2 – 2.12.2	—

CWE-94