CVE-2024-21982

CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9

Medium · published January 11, 2024

CVSS v3.1
4.8
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

ONTAP versions 9.4 and higher are susceptible to a vulnerability

which when successfully exploited could lead to disclosure of sensitive

information to unprivileged attackers when the object-store profiler

command is being run by an administrative user.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.2th percentile
Published
2024-01-11T23:32Z
EPSS history
Timeline
  • 11 JAN 23:32Z
    CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9
    cvelistv5