CVE Feed

    Dashboard / CVE / CVE-2017-8919

    CVE-2017-8919

    NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors.

    Published:Jul 25, 2017
    Last Modified:Apr 20, 2025
    EPS:Jul 25, 2017
    EPSS Score:0.00213
    CVSS Score:6.5

    Affected Products

    Vendor
    Netapp
    Product
    Oncommand Api Services

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-21409 (CVSS 5.9) — Netty is an open-source, asynchronous event-driven network application framework for rapid development of main…
    CVE-2021-21295 (CVSS 5.9) — Netty is an open-source, asynchronous event-driven network application framework for rapid development of main…
    CVE-2021-20190 (CVSS 8.1) — A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serializati…
    CVE-2020-10683 (CVSS 9.8) — dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might e…
    CVE-2020-8840 (CVSS 9.8) — FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated b…
    CVE-2020-11612 (CVSS 7.5) — The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncod…
    CVE-2020-25649 (CVSS 7.5) — A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This …
    CVE-2019-20330 (CVSS 9.8) — FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.…
    CVE-2019-17359 (CVSS 7.5) — The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, a…
    CVE-2019-16943 (CVSS 9.8) — A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typ…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High