ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attacker to set the snapshot expiry time to none.
2026-01-12T18:15:48.983
2026-01-22T17:58:22.053
Analyzed
CVSSv3.1: 4.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.16.1 | Yes |
| Application | netapp | ontap | 9.17.1 | Yes |
| Application | netapp | ontap | 9.17.1 | Yes |