CVE-2019-5506

—

CVSS 3.1

5.9 medium

EPSS

<1%p55

Published

Oct 9, 2019 (Oct 9, 2019)

Modified

Jun 17, 2026

Description

Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.

Vendors: netapp
Products: clustered data ontap
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.