8.1
CVE-2022-23241
- EPSS 0.48%
- Published 19.10.2022 18:15:12
- Last modified 09.05.2025 15:15:50
- Source security-alert@netapp.com
- Teams watchlist Login
- Open Login
Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.
Data is provided by the National Vulnerability Database (NVD)
Netapp ≫ Clustered Data Ontap Version9.11.1 Update-
Netapp ≫ Clustered Data Ontap Version9.11.1 Updatep2
Netapp ≫ Clustered Data Ontap Version9.11.1 Updaterc1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.643 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.