8.1
CVE-2022-23241
- EPSS 0.35%
- Veröffentlicht 19.10.2022 18:15:12
- Zuletzt bearbeitet 09.05.2025 15:15:50
- Quelle security-alert@netapp.com
- CVE-Watchlists
- Unerledigt
LoginClustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Clustered Data Ontap Version9.11.1 Update-
Netapp ≫ Clustered Data Ontap Version9.11.1 Updatep2
Netapp ≫ Clustered Data Ontap Version9.11.1 Updaterc1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.565 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.