CVE-2021-26999

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails

published August 6, 2021

CVSS
—
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00646 · 50.3th percentile
Published
2021-08-06T14:20Z
EPSS history
Timeline
  • 06 AUG 14:20Z
    NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails
    cvelistv5