CVE-2021-26999

Name of the Vulnerable Software and Affected Versions: NetApp Cloud Manager versions prior to 3.9.9

Description: The issue concerns the logging of sensitive information when an Active Directory connection fails. This logged information is accessible only to authenticated users. There is no mention of the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations: For versions prior to 3.9.9, upgrade to a fixed version, especially for customers using on-prem connectors with auto-upgrade disabled. Customers with auto-upgrade enabled should already be on a fixed version.