Skip to content
OpenAdvisories
High WID-SEC-2022-2348 2 CVEs

NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Dec 15, 2022 · Updated Dec 15, 2022 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Product: ActiveIQ Unified Manager for Microsoft Windows Product: ActiveIQ Unified Manager for VMware vSphere Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp ActiveIQ Unified Manager ausnutzen, um Informationen offenzulegen.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-31692 Public exploit

    Spring Security authorization rules can be bypassed via forward or include dispatcher types

    Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expe…

    libspring-java org.springframework.security:spring-security-core Ubuntu Maven
  • High 8.1
    CVE-2022-31690

    spring-security-oauth2-client vulnerable to Privilege Escalation

    Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the br…

    libspring-java org.springframework.security:spring-security-oauth2-client Ubuntu Maven

Revision history

  1. #1

    Initiale Fassung

References