8.1
CVE-2022-23241
- EPSS 0.48%
- Veröffentlicht 19.10.2022 18:15:12
- Zuletzt bearbeitet 09.05.2025 15:15:50
- Quelle security-alert@netapp.com
- Teams Watchlist Login
- Unerledigt Login
Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Clustered Data Ontap Version9.11.1 Update-
Netapp ≫ Clustered Data Ontap Version9.11.1 Updatep2
Netapp ≫ Clustered Data Ontap Version9.11.1 Updaterc1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.643 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.