5.3Mittel
CVE-2026-22052
Beschreibung
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.
Schwachstellentyp (CWE):
CWE-209
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://security.netapp.com/advisory/NTAP-20260304-0001 Vendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:netapp:ontap:*:*:*:*:*:*:*:*≥ 9.12.1cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*