CVE-2021-26999

published 2021-08-06

CVE-2021-26999: NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netapp	cloud_manager	< 3.9.9	3.9.9

CWE-532 CWE-200