Medium · 5.3 CVE-2023-27311 EUVD-2023-31088GHSA-5c5v-q9x6-5vc6

NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architecture resolves this is…

Published May 26, 2023 · Updated Jan 15, 2025 · Assigned by netapp

Description

NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architecture resolves this issue - obtaining the fix requires redeploying a fresh Connector.

Affected products

Vendor	Product	Affected	Fixed
—	Information Disclosure Vulnerability in NetApp BlueXP Connector	prior to 3.9.25	—

References

https://security.netapp.com/advisory/ntap-20230525-0001/