VULNERABILITY INTELLIGENCE

CVE-2016-5374

CVSS score8.8 HIGH

EPSS probability2.06%

CISA KEVNot currently listed

Published2017-03-01

Last modified2026-06-17

Description

NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL entry.