✕
Request a Demo
Rewterz
Rewterz Threat Advisory –CVE-2021-38166 – Linux Kernel Integer Overflow Vulnerability
August 10, 2021
Rewterz
Rewterz Threat Advisory –CVE-2021-24522 – WordPress Cross Site Scripting Vulnerability
August 10, 2021

Rewterz Threat Advisory –Multiple NetApp Cloud Manager Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-26998

NetApp Cloud Manager could allow a remote authenticated attacker to obtain sensitive information, caused by log sensitive information vulnerability. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

CVE-2021-26999

NetApp Cloud Manager could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when the Active Directory connection fails. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

Impact

  • Sensitive Information Theft
  • Information Disclosure

Affected Vendors

NetApp

Affected Products

  • NetApp Cloud Manager 3.9.8

Remediation

Refer to these Vulnerabilities for the patch, upgrade, or suggested workaround information.

https://security.netapp.com/advisory/ntap-20210805-0011/