Vulnerabilities > CVE-2021-26991 - Unspecified vulnerability in Netapp Cloud Manager

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

netapp

NVD

Published: 2021-03-19

Updated: 2021-03-23

Summary

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager.

Vulnerable Configurations

Part	Description	Count
Application	Netapp Netapp Cloud Manager - Netapp Cloud Manager 3.4 Netapp Cloud Manager 3.4.1 Netapp Cloud Manager 3.4.2 Netapp Cloud Manager 3.4.3 Netapp Cloud Manager 3.4.4 Netapp Cloud Manager 3.4.5 Netapp Cloud Manager 3.5 Netapp Cloud Manager 3.5.1 Netapp Cloud Manager 3.5.2 Netapp Cloud Manager 3.5.3 Netapp Cloud Manager 3.6 Netapp Cloud Manager 3.6.1 Netapp Cloud Manager 3.6.2 Netapp Cloud Manager 3.6.3 Netapp Cloud Manager 3.6.4 Netapp Cloud Manager 3.6.5 Netapp Cloud Manager 3.6.6 Netapp Cloud Manager 3.7 Netapp Cloud Manager 3.7.1 Netapp Cloud Manager 3.7.2 Netapp Cloud Manager 3.7.3 Netapp Cloud Manager 3.7.4 Netapp Cloud Manager 3.7.5 Netapp Cloud Manager 3.8 Netapp Cloud Manager 3.8.1 Netapp Cloud Manager 3.8.2 Netapp Cloud Manager 3.8.3 Netapp Cloud Manager 3.8.4 Netapp Cloud Manager 3.8.5 Netapp Cloud Manager 3.8.6 Netapp Cloud Manager 3.8.7 Netapp Cloud Manager 3.8.9 Netapp Cloud Manager 3.9 Netapp Cloud Manager 3.9.1 Netapp Cloud Manager 3.9.2 Netapp Cloud Manager 3.9.3	37

References

https://security.netapp.com/advisory/NTAP-20210318-0002