{"status":"success","advisory":{"_id":"683547205b16347a91c39c96","kb_acknowledgements":null,"kb_affected_list":["Clustered Data ONTAP"],"kb_bad_data":false,"kb_cve":["CVE-2015-8020"],"kb_exploitation":"Not public","kb_fixes":[{"product":"Clustered Data ONTAP","fixes":[{"link":"http://mysupport.netapp.com/NOW/download/software/ontap/8.3.2P4/","cves":[]}],"instructions":"","wontfix":false,"eos_link":null}],"kb_impact":"Exploitation of this vulnerability may lead to the disclosure of the name of a Storage Virtual Machine (SVM) via a limited shell.","kb_internal_notes":[{"burt":"962657","jira":"","product":"Clustered Data ONTAP"}],"kb_investigating_list":[],"kb_num":"9010097","kb_ref":[],"kb_rev_history":[{"comment":"Initial Public Release;Final status","date":"20160802","version":"2.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2015-8020":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"kb_scoring_calc":[{"cve_id":"CVE-2015-8020","range":"MEDIUM","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"kb_status":"Final","kb_summary":"Clustered Data ONTAP contains a default privileged account which under certain conditions can be used for unauthorized information disclosure.","kb_title":"CVE-2015-8020 Default Privileged Account Credentials Vulnerability in in Clustered Data ONTAP","kb_unaffected_list":["7-Mode Transition Tool","ATTO FibreBridge - 6500N","Brocade Fabric Operating System Firmware","Cloud Manager","Clustered Data ONTAP Antivirus Connector","E-Series SANtricity Storage Manager","E-Series SANtricity Web Services (REST API) for Web Services Proxy","FAS/AFF BIOS","Host Utilities - SAN for Linux","Host Utilities - SAN for Windows","MetroCluster Tiebreaker for clustered Data ONTAP","NetApp Cloud Backup (formerly AltaVault)","NetApp Cloud Backup OST Plug-in (formerly AltaVault OST Plug-in)","NetApp Manageability SDK","NetApp NFS Plug-in for VMware VAAI","NetApp SANtricity SMI-S Provider","NetApp SMI-S Provider","NetApp Storage Encryption","OnCommand Insight","OnCommand Workflow Automation","Open Systems SnapVault Agent","Service Processor","Single Mailbox Recovery","Snap Creator Framework","SnapCenter","SnapDrive for Unix","SnapManager for Exchange","SnapManager for Hyper-V","SnapManager for Oracle","SnapManager for SAP","SnapManager for Sharepoint","Storage Services Connector","StorageGRID (formerly StorageGRID Webscale)","StorageGRID9 (9.x and prior)","System Manager 9.x"],"kb_workarounds":"None.","ntap_advisory_id":"NTAP-20160802-0001","adv_id":"ntap-20160802-0001","published_date":"2016-08-02T00:00:00","updated_date":"2016-08-02T00:00:00","inserted_date":"2025-05-27T05:01:20.981000","modified_date":null}}