Description
ONTAP versions 9.4 and higher are susceptible to a vulnerability
which when successfully exploited could lead to disclosure of sensitive
information to unprivileged attackers when the object-store profiler
command is being run by an administrative user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetApp | ONTAP 9 | 9.4 – < 9.8P21, 9.9.1 – < 9.9.1P18, 9.10.1 – < 9.10.1P16, 9.11.1 – < 9.11.1P13, 9.12.1 – < 9.12.1P8, 9.13.1 – < 9.13.1P4 | 9.8P21 |
Advisories 1
- WID-SEC-2024-0069 NetApp Data ONTAP: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 11, 2024