{"status":"success","advisory":{"_id":"683547215b16347a91c39c97","kb_acknowledgements":null,"kb_affected_list":["MetroCluster Tiebreaker for clustered Data ONTAP"],"kb_bad_data":false,"kb_cve":["CVE-2016-6820"],"kb_exploitation":"Not public","kb_fixes":[{"product":"MetroCluster Tiebreaker for clustered Data ONTAP","fixes":[{"link":"http://mysupport.netapp.com/NOW/download/software/metrocluster_tiebreaker/1.2/","cves":[]}],"instructions":"","wontfix":false,"eos_link":null}],"kb_impact":"Exploitation of this vulnerability may lead to unauthorized disclosure of information.","kb_internal_notes":[{"burt":"987238","jira":"","product":"MetroCluster Tiebreaker for clustered Data ONTAP"}],"kb_investigating_list":[],"kb_num":"9010098","kb_ref":[],"kb_rev_history":[{"comment":"Initial Public Release; Final status","date":"20160816","version":"1.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2016-6820":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"},"kb_scoring_calc":[{"cve_id":"CVE-2016-6820","range":"CRITICAL","score":9.0,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}],"kb_status":"Final","kb_summary":"MetroCluster Tiebreaker for clustered Data ONTAP discloses sensitive information in cleartext which may be viewed by an unauthenticated user. All versions of MetroCluster Tiebreaker for clustered Data ONTAP prior to 1.2 are vulnerable.","kb_title":"CVE-2016-6820 Sensitive Information Disclosure in MetroCluster Tiebreaker for clustered Data ONTAP","kb_unaffected_list":["7-Mode Transition Tool","ATTO FibreBridge - 6500N","Brocade Fabric Operating System Firmware","Cloud Manager","Clustered Data ONTAP","Clustered Data ONTAP Antivirus Connector","E-Series SANtricity Storage Manager","E-Series SANtricity Web Services (REST API) for Web Services Proxy","FAS/AFF BIOS","Host Utilities - SAN for Linux","Host Utilities - SAN for Windows","NetApp Cloud Backup (formerly AltaVault)","NetApp Manageability SDK","NetApp NFS Plug-in for VMware VAAI","NetApp SANtricity SMI-S Provider","NetApp SMI-S Provider","NetApp Storage Encryption","OnCommand Insight","OnCommand Workflow Automation","Open Systems SnapVault Agent","Service Processor","Single Mailbox Recovery","Snap Creator Framework","SnapCenter","SnapDrive for Unix","SnapManager for Exchange","SnapManager for Hyper-V","SnapManager for Oracle","SnapManager for SAP","SnapManager for Sharepoint","Storage Services Connector","StorageGRID (formerly StorageGRID Webscale)","StorageGRID9 (9.x and prior)","System Manager 9.x"],"kb_workarounds":"None.","ntap_advisory_id":"NTAP-20160816-0001","adv_id":"ntap-20160816-0001","published_date":"2016-08-16T00:00:00","updated_date":"2016-08-16T00:00:00","inserted_date":"2025-05-27T05:01:20.996000","modified_date":null}}