Aller au contenu
Se connecter
7.6 Élevée

CVE-2024-21985 ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability…

Description

ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include viewing limited configuration details and metrics or modifying limited settings, some of which could result in a Denial of Service (DoS).

Produits et versions touchés

Produit Versions touchées Corrigé en
ONTAP 9 9.13 premières → < 9.13.1P4 9.13.1P4
ONTAP 9 9.12 premières → < 9.12.1P10 9.12.1P10
ONTAP 9 9.11 premières → < 9.11.1P13 9.11.1P13
ONTAP 9 9.10 premières → < 9.10.1P16 9.10.1P16
ONTAP 9 9.0 9.0 → < 9.9.1P18 9.9.1P18

Autres CVE de ONTAP 9

Les 8 CVE de ONTAP 9 →
CVE-2026-22063 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products 6.0 Moyenne CVE-2026-22049 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a… 8.7 Élevée CVE-2026-22052 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability 5.3 Moyenne CVE-2026-22050 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to… 6.9 Moyenne
Suivre cette CVE