Vulnerabilities > CVE-2016-6904 - Credentials Management vulnerability in Netapp Vasa Provider 6.0/6.X/7.0
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |