VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 6, 2021· Updated Jun 17, 2026

CVE-2021-26999

CVE-2021-26999

Description

NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version.

Affected products

2
  • NetApp/Cloud Manager2 versions
    cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*range: <3.9.9
    • (no CPE)range: <3.9.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.