CVE-2021-26988

Published: Mar 4, 2021Modified: Jun 17, 2026

3.5

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.1 / Impact: 1.4

Source: NVD

Description

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs.

Affected (58)

Products: Netapp: Data Ontap

Netapp

1 product

Data Ontap

Configuration A

58 vulnerable

Vulnerable Software	Affected Versions
Netapp Data Ontap	Version 9.3.0
Netapp Data Ontap	Version 9.3.0 p10
Netapp Data Ontap	Version 9.3.0 p11
Netapp Data Ontap	Version 9.3.0 p12
Netapp Data Ontap	Version 9.3.0 p13
Netapp Data Ontap	Version 9.3.0 p14
Netapp Data Ontap	Version 9.3.0 p15
Netapp Data Ontap	Version 9.3.0 p16
Netapp Data Ontap	Version 9.3.0 p17
Netapp Data Ontap	Version 9.3.0 p18
Netapp Data Ontap	Version 9.3.0 p19
Netapp Data Ontap	Version 9.3.0 p1
Netapp Data Ontap	Version 9.3.0 p20
Netapp Data Ontap	Version 9.3.0 p2
Netapp Data Ontap	Version 9.3.0 p3
Netapp Data Ontap	Version 9.3.0 p4
Netapp Data Ontap	Version 9.3.0 p5
Netapp Data Ontap	Version 9.3.0 p6
Netapp Data Ontap	Version 9.3.0 p7
Netapp Data Ontap	Version 9.3.0 p8
Netapp Data Ontap	Version 9.3.0 p9
Netapp Data Ontap	Version 9.5.0
Netapp Data Ontap	Version 9.5.0 p10
Netapp Data Ontap	Version 9.5.0 p11
Netapp Data Ontap	Version 9.5.0 p12
Netapp Data Ontap	Version 9.5.0 p13
Netapp Data Ontap	Version 9.5.0 p14
Netapp Data Ontap	Version 9.5.0 p15
Netapp Data Ontap	Version 9.5.0 p1
Netapp Data Ontap	Version 9.5.0 p2
Netapp Data Ontap	Version 9.5.0 p3
Netapp Data Ontap	Version 9.5.0 p4
Netapp Data Ontap	Version 9.5.0 p5
Netapp Data Ontap	Version 9.5.0 p6
Netapp Data Ontap	Version 9.5.0 p7
Netapp Data Ontap	Version 9.5.0 p8
Netapp Data Ontap	Version 9.5.0 p9
Netapp Data Ontap	Version 9.6.0
Netapp Data Ontap	Version 9.6.0 p10
Netapp Data Ontap	Version 9.6.0 p11
Netapp Data Ontap	Version 9.6.0 p1
Netapp Data Ontap	Version 9.6.0 p2
Netapp Data Ontap	Version 9.6.0 p3
Netapp Data Ontap	Version 9.6.0 p4
Netapp Data Ontap	Version 9.6.0 p5
Netapp Data Ontap	Version 9.6.0 p6
Netapp Data Ontap	Version 9.6.0 p7
Netapp Data Ontap	Version 9.6.0 p8
Netapp Data Ontap	Version 9.6.0 p9
Netapp Data Ontap	Version 9.7.0
Netapp Data Ontap	Version 9.7.0 p1
Netapp Data Ontap	Version 9.7.0 p2
Netapp Data Ontap	Version 9.7.0 p3
Netapp Data Ontap	Version 9.7.0 p4
Netapp Data Ontap	Version 9.7.0 p5
Netapp Data Ontap	Version 9.7.0 p6
Netapp Data Ontap	Version 9.7.0 p7
Netapp Data Ontap	Version 9.8.0

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.netapp.com/advisory/NTAP-20210303-0001

Source: security-alert@netapp.com

PatchVendor Advisory

https://security.netapp.com/advisory/NTAP-20210303-0001

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.