Skip to content
OpenAdvisories
Medium WID-SEC-2023-0749 1 CVE

NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Manipulation von Dateien

Published Mar 26, 2023 · Updated Mar 26, 2023 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Product: ActiveIQ Unified Manager Linux Product: ActiveIQ Unified Manager VMware vSphere Product: ActiveIQ Unified Manager Windows Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Dateien zu manipulieren.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-4492

    Undertow client not checking server identity presented by server certificate in https connections

    The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven

Revision history

  1. #1

    Initiale Fassung

References