NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypass intended sharing restrictions by leveraging improper handling of the owner_rights ACL entry.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Data_ontap | Netapp | 9.0 (including) | 9.0 (including) |
| Data_ontap | Netapp | 9.1 (including) | 9.1 (including) |