CVE-2023-27311

2023-05-2600:00:00

netapp

www.cve.org

netapp

blue xp connector

directory listing

information exposure

architecture

redeploying

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architecture resolves this issue - obtaining the fix requires redeploying a fresh Connector.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Information Disclosure Vulnerability in NetApp BlueXP Connector",
    "versions": [
      {
        "version": "prior to 3.9.25",
        "status": "affected"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20230525-0001/