Low WID-SEC-2023-3161 1 CVE

NetApp Data ONTAP: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 17, 2023 · Updated Dec 17, 2023 · de-DE

Vendor: NETAPP Product: Data ONTAP Product: Data ONTAP < 9.12.1P9 Product: Data ONTAP < 9.13.1P6

Summary

Ein Angreifer mit physischem Zugriff kann eine Schwachstelle in NetApp Data ONTAP ausnutzen, um Informationen offenzulegen.

Product

Data ONTAP ist das Betriebssystem von NetApp Speicherprodukten.

Vulnerabilities 1

Medium 4.3

CVE-2023-27317

Information Disclosure Vulnerability in ONTAP 9

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after…

NETAPP ONTAP 9

Dec 15, 2023

Revision history

2023-12-17 #1
Initiale Fassung

References

NetApp Security Advisory vom 2023-12-17
https://security.netapp.com/advisory/NTAP-20231215-0001/
GitHub Advisory Database vom 2023-12-17
https://github.com/advisories/GHSA-xgfv-h6v5-c2rq