VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Aug 25, 2022· Updated Jun 17, 2026

CVE-2022-23235

CVE-2022-23235

Description

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when AutoSupport has been disabled.

Affected products

8
  • NetApp/Active Iq Unified Manager7 versions
    cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:linux:*:*+ 6 more
    • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:linux:*:*range: <9.10
    • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*range: <9.10
    • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*range: <9.10
    • cpe:2.3:a:netapp:active_iq_unified_manager:9.10:-:*:*:*:linux:*:*
    • cpe:2.3:a:netapp:active_iq_unified_manager:9.10:-:*:*:*:vmware_vsphere:*:*
    • cpe:2.3:a:netapp:active_iq_unified_manager:9.10:-:*:*:*:windows:*:*
    • (no CPE)range: <9.10P1
  • VMware/Active IQ Unified Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.