CVE-2019-5492 Information disclosure in Element Plug-in for vCenter Server
An unauthenticated attacker can disclose sensitive account information via the Element Plug-in for vCenter Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5492?
CVE-2019-5492 is a high-severity vulnerability in NetApp, Inc. Element Plug-in for vCenter Server, published on 29 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.
Which versions are affected by CVE-2019-5492?
It affects 2 products.
Products include Netapp Element Plug-in for Vcenter Server, Netapp Hyper Converged Infrastructure Compute Node.
How do I fix CVE-2019-5492?
No fix has been published for CVE-2019-5492 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5492 being exploited?
There is no known exploitation of CVE-2019-5492 in the wild and no public exploit code.
Other vulnerabilities in NetApp, Inc. Element Plug-in for vCenter Server
Sources
Also known as GHSA-m5cm-69xp-qf52.