Vulnerabilities > CVE-2021-27003 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Netapp Clustered Data Ontap

047910
CVSS 4.7 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
netapp
CWE-1021
NVD
Published: 2021-10-12
Updated: 2021-10-18

Summary

Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack.

Vulnerable Configurations

Part Description Count
OS
Netapp
40

Common Weakness Enumeration (CWE)

References