CVE-2021-27001

Name of the Vulnerable Software and Affected Versions: NetApp Clustered Data ONTAP versions prior to 9.5P18 NetApp Clustered Data ONTAP versions prior to 9.6P16 NetApp Clustered Data ONTAP versions prior to 9.7P16 NetApp Clustered Data ONTAP versions prior to 9.8P7 NetApp Clustered Data ONTAP versions prior to 9.9.1P2

Description: The issue allows an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.

Recommendations: For versions prior to 9.5P18, update to 9.5P18 or later. For versions prior to 9.6P16, update to 9.6P16 or later. For versions prior to 9.7P16, update to 9.7P16 or later. For versions prior to 9.8P7, update to 9.8P7 or later. For versions prior to 9.9.1P2, update to 9.9.1P2 or later.