Description
ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a
vulnerability which will cause all SAS-attached FIPS 140-2 drives to
become unlocked after a system reboot or power cycle or a single
SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This
could lead to disclosure of sensitive information to an attacker with
physical access to the unlocked drives.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetApp | ONTAP 9 | 9.12.1P8, 9.13.1P4, 9.13.1P5 | — |
Advisories 1
- WID-SEC-2023-3161 NetApp Data ONTAP: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 17, 2023