CVE-2023-27317CWE-200

Information Disclosure Vulnerability in ONTAP 9

Medium · published December 15, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to a

vulnerability which will cause all SAS-attached FIPS 140-2 drives to

become unlocked after a system reboot or power cycle or a single

SAS-attached FIPS 140-2 drive to become unlocked after reinsertion. This

could lead to disclosure of sensitive information to an attacker with

physical access to the unlocked drives.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-12-15T22:59Z
EPSS history
Timeline
  • 15 DEC 22:59Z
    Information Disclosure Vulnerability in ONTAP 9
    cvelistv5