CVE-2022-29134

Technical details about CVE-2022-29134 (affected products, root cause, exploitability, and fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2022-29123 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29123 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29123

Technical details for CVE-2022-29123 (Windows Clustered Shared Volume Information Disclosure) are not provided in the connected documents. The initial entry includes general descriptions, but no product/version/root-cause/impact/fix details are available here. Monitor for official updates.

CVE-2022-29122 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29122

Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.

CVE-2022-29120 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29120

Technical details (affected product/component/version/root cause/fix) are not provided in the initial or connected documents. Monitor for official updates; no explicit remediation, exploit status, or CVE-risk details are present in the supplied sources.

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

Windows Clustered Shared Volume Elevation of Privilege Vulnerability

...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

PT-2022-2540 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Clustered Shared Volume versions affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Clustered Shared Volume CSV file system, which is caused by synchronization...

Vulnerabilities fixed in NetApp Clustered Data ONTAP

NetApp has released updates to fix vulnerabilities in several third-party components for Clustered Data ONTAP. The vulnerabilities are in OpenSSL, PHP, OpenSSH and Apache and enable a malicious party to cause a denial-of-service cause, gain access to sensitive data and potentially manipulate data...

Vulnerability discovered in NetApp Clustered Data ONTAP

NetApp has discovered a vulnerability in Clustered Data ONTAP. The vulnerability is located in the version of the provided tool Expat and allows a malicious party to gain access to sensitive data, potentially to manipulate it, or to cause a Denial-of-Service. NetApp has not released any updates a...

Security Bulletin: SMB vulnerabilities in IBM N Series Products

Summary Data ONTAP products implement the SMB protocol. Systems that implement the SMB protocol can be susceptible to one or more man-in-the-middle attacks which when exploited could potentially lead to information disclosure, privilege escalation, or a Denial of Service. Vulnerability Details...

jetty: SessionListener can prevent a session from being invalidated breaking logout

A flaw was discovered in the jetty-server, where if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts, this could result in a session not being...

jetty: SessionListener can prevent a session from being invalidated breaking logout

A flaw was discovered in the jetty-server, where if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts, this could result in a session not being...

Clustered Data ONTAP Denial of Service Vulnerability

Clustered Data ONTAP is a proprietary operating system used by NetApp for storage disk arrays.A denial-of-service vulnerability exists in Clustered Data ONTAP. An attacker could exploit this vulnerability to cause the httpd server to crash...

CVE-2021-27005

Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server...