Summary
Ein lokaler Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Dateien zu manipulieren, und um Informationen offenzulegen.
Product
ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.
Vulnerabilities 1
-
High 7.1
tempfile.mkdtemp() may be readable and writeable by all users on Windows
On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate conf…
Revision history
-
#1
Initiale Fassung
References
-
NetApp Security Advisories vom 2025-10-29
https://security.netapp.com/advisory/NTAP-20240705-0005
-
NIST Advisory CVE-2024-4030
https://nvd.nist.gov/vuln/detail/CVE-2024-4030