CVE-2020-8590: Netapp Clustered Data Ontap

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.

Affected products

• Netapp Clustered Data Ontap: before 9.1 (fixed in 9.1); from 9.2, before 9.3 (fixed in 9.3); version 9.1 only; version 9.3 only

Published 2021-02-08. Last modified 2026-06-17.