NetApp Alert
2760Warning Date
Severity Level
Warning Number
Target Sector
9 February, 2023
● Critical
2023-5447
All
NetApp has released security updates to address multiple vulnerabilities in the following products:
* Active IQ Unified Manager for Microsoft Windows
* Active IQ Unified Manager for VMware vSphere
* OnCommand Insight
* OnCommand Workflow Automation
* SnapCenter
An attacker could exploit these vulnerabilities to achieve the following:
* Partial or complete Denial of Service (DoS) of MySQL server.
* Unauthorized takeover of MySQL Server
* Unauthorized read or modification access to a subset or all of the MySQL Server accessible data
The CERT team encourages users to update the affected products and review NetApp security advisory:
https://security.netapp.com/advisory/ntap-20230208-0002/