Ontap Security Vulnerabilities - 2023

CVE-2023-27317

ONTAP 9 versions 9.12.1P8, 9.13.1P4, and 9.13.1P5 are susceptible to avulnerability which will cause all SAS-attached FIPS 140-2 drives tobecome unlocked after a system reboot or power cycle or a singleSAS-attached FIPS 140-2 drive to become unlocked after reinsertion. Thiscould lead to disclosure ...

CVE-2023-27536

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/...