PHP Vulnerability and ONTAP

13 Upvotes

We have multiple ONTAP9 systems and I'm looking at this.

https://security.netapp.com/advisory/NTAP-20261021-0021

The systems run several CIFS and NFS SVMs but far as I know the only web stuff we use is the ONTAP System Manager and we do some monitoring via ONTAPI.

It's not super clear exactly what the impact of "system services web modify -external false" is (to me).

Specifically if it has any impact on data serving protocols like CIFS and NFS.

Could anyone confirm/clarify please?

19 comments

Subreddit

NetApp

r/netapp

For NetApp users/administrators/enthusiasts (unofficial)

Members Active

6.6k

Sidebar

A subreddit for NetApp users/administrators/enthusiasts

Other sites to check out:

Rules:

No distribution of software against licensing agreement / You may not post or solicit links to obtain copyright software against the terms of the licensing agreement. For clarity, this means that you may not post or solicit links to download NetApp software from any location other than netapp.com
No distribution of exam dumps / You may not post or solicit links to dumps of certification exams from NetApp or others. This undermines the value of certifications. Many of the NetApp exam authors are regular contributors to this subreddit
First party job advertisements only / You may only post links to or solicit applications for positions for a company for which you work - no external recruiter posts. All jobs must include NetApp systems or services administration as a main task. All job posts must include an EEOC statement.
No blogspam / You may not post links to low-effort content, or to sites that require signup and/or payment to view. This includes both text based blogs and videos.