Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-27317

Information Disclosure Vulnerability in ONTAP 9

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
netapp

Description

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a vulnerability which will cause all SAS-attached FIPS 140-2 drives to become unlocked after a system reboot or power cycle or a single SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This could lead to disclosure of sensitive information to an attacker with physical access to the unlocked drives.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetApp ONTAP 9

Default version status: unaffected

  • 9.12.1P8affected
  • 9.13.1P4affected
  • 9.13.1P5affected

References