CVE-2023-27315

MEDIUM

SnapGathers <4.9 - Info Disclosure

Title source: llm

Description

SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials

References (1)

[Vendor Advisory] https://security.netapp.com/advisory/ntap-20231009-0002/

Scores

CVSS v3 6.5

EPSS 0.0010

EPSS Percentile 27.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Classification

CWE

CWE-522 CWE-256

Status published

Affected Products (1)

netapp/snapgathers < 4.9

Timeline

Published Oct 12, 2023

Tracked Since Feb 18, 2026