May 9, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – Multiple IBM InfoSphere Information Server
November 3, 2021Rewterz Threat Advisory – Multiple McAfee Data Loss Prevention (DLP) ePO Extension
November 3, 2021Rewterz Threat Advisory – Multiple IBM InfoSphere Information Server
November 3, 2021Rewterz Threat Advisory – Multiple McAfee Data Loss Prevention (DLP) ePO Extension
November 3, 2021
Severity
Medium
Analysis Summary
CVE-2021-27005
NetApp Clustered Data ONTAP is vulnerable to a denial of service. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to crash the httpd server.
CVE-2021-27004
NetApp System Manager could allow a local authenticated attacker to obtain sensitive information. An attacker could exploit this vulnerability to discover plaintext iSCSI CHAP credentials.
Impact
- Denial of Service
- Information Disclosure
Affected Vendors
NetApp
Affected Products
- NetApp System Manager 9.7P16
- NetApp System Manager 9.8P7
- NetApp System Manager 9.9.1P2
- NetApp Clustered Data ONTAP 9.6P16
- NetApp Clustered Data ONTAP 9.7P16
- NetApp Clustered Data ONTAP 9.9.1P3
Remediation
Refer to NetApp Advisory for patch, upgrade, or suggested workaround information.
CVE-2021-27005
CVE-2021-27004
