679 matches found
CVE-2021-27001
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period...
Code injection
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period...
CVE-2021-27001
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period...
CVE-2021-27001
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period...
CVE-2021-27001
CVE-2021-27001 affects NetApp Clustered Data ONTAP: multiple 9.x releases (before 9.5P18, 9.6P16, 9.7P16, 9.8P7, 9.9.1P2) are susceptible to an authenticated privileged local attacker who can arbitrarily modify Compliance-mode WORM data before retention ends. The vulnerability is described across...
CVE-2021-27001: Undefined Security Weakness
Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period...
Netapp Clustered Data ONTAP 安全漏洞
Netapp Clustered Data ONTAP is a storage operating system for clustered mode from the US company Netapp. A security vulnerability exists in Clustered Data ONTAP 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2, which allows an authenticated, local attacker to arbitrarily modify...
PT-2021-17226
Name of the Vulnerable Software and Affected Versions: NetApp Clustered Data ONTAP versions prior to 9.5P18 NetApp Clustered Data ONTAP versions prior to 9.6P16 NetApp Clustered Data ONTAP versions prior to 9.7P16 NetApp Clustered Data ONTAP versions prior to 9.8P7 NetApp Clustered Data ONTAP...
CVE-2021-27003
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
CVE-2021-27003
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
Code injection
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
CVE-2021-27003
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
CVE-2021-27003
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
CVE-2021-27003
CVE-2021-27003 affects NetApp Clustered Data ONTAP. Affected products/versions: Clustered Data ONTAP earlier than 9.5P18, 9.6P15, 9.7P14, 9.8P5, and 9.9.1. Root cause: missing X-Frame-Options header could enable clickjacking. Impact stated in sources: exposure to clickjacking if served pages are ...
PT-2021-17228
Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions prior to 9.5P18 Clustered Data ONTAP versions prior to 9.6P15 Clustered Data ONTAP versions prior to 9.7P14 Clustered Data ONTAP versions prior to 9.8P5 Clustered Data ONTAP versions prior to 9.9.1 Description: T...
Netapp Clustered Data ONTAP 安全漏洞
Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. A clickjacking vulnerability exists in Clustered Data ONTAP versions 9.5P18, 9.6P15, 9.7P14, 9.8P5, and prior to 9.9.1. The vulnerability stems from the lack of an X-Frame-Options header in the product. An...
CVE-2021-27003: Improper Restriction of Rendered UI Layers or Frames
Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack...
Vulnerability fixed in NetApp Clustered Data ONTAP
NetApp has fixed a vulnerability in the BSD sub-layer of Clustered Data ONTAP. The vulnerability is located in the ipv6 impelementation and potentially allows a malicious party to cause a denial-of-service exploit. NetApp has released updates to fix the vulnerability in Clustered Data ONTAP. For...