4.3

CVE-2026-22050

ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Ontap Version 9.16.1 Update -
Netapp ≫ Ontap Version 9.16.1 Update p1
Netapp ≫ Ontap Version 9.16.1 Update p2
Netapp ≫ Ontap Version 9.16.1 Update p3
Netapp ≫ Ontap Version 9.16.1 Update p4
Netapp ≫ Ontap Version 9.16.1 Update p5
Netapp ≫ Ontap Version 9.16.1 Update p6
Netapp ≫ Ontap Version 9.16.1 Update p7
Netapp ≫ Ontap Version 9.16.1 Update p8
Netapp ≫ Ontap Version 9.17.1 Update -
Netapp ≫ Ontap Version 9.17.1 Update p1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.095
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
security-alert@netapp.com 6.9 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-639 Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

https://security.netapp.com/advisory/NTAP-20260112-0001
Vendor Advisory