NetApp Clustered Data ONTAP Storage Virtual Machine boundary: A user in one SVM enumerates the names of other SVMs and

Impact

A user in one SVM enumerates the names of other SVMs and the filenames inside them. Dataset and checkpoint names alone tell a competitor what another tenant is training.

Who can reach it

An authenticated user on an adjacent network with access to any SVM on a Clustered Data ONTAP system earlier than 9.3P20 or 9.5P15.

What to do

Upgrade to 9.3P20 / 9.5P15 or later. Where SVM naming itself is sensitive, rename after patching, since the old names are already exposed.

References