Design/Logic Flaw

2023-02-2823:15:00

PRIOn knowledge base

www.prio-n.com

active iq

unified manager

vulnerability

ems subscriptions

update

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors.

CPENameOperatorVersion
active_iq_unified_managereq< 9.11p1
active_iq_unified_managereq< 9.11p1
active_iq_unified_managereq< 9.11p1

Name	Operator	Version
active_iq_unified_manager	eq	< 9.11p1
active_iq_unified_manager	eq	< 9.11p1
active_iq_unified_manager	eq	< 9.11p1

References

security.netapp.com/advisory/ntap-20220901-0002/