PT-2021-17228
CVE-2021-27003
·
Published
2021-10-12
·
Updated
2021-10-18
Description by
CVSS 3.1
4.7
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Clustered Data ONTAP versions prior to 9.5P18
Clustered Data ONTAP versions prior to 9.6P15
Clustered Data ONTAP versions prior to 9.7P14
Clustered Data ONTAP versions prior to 9.8P5
Clustered Data ONTAP versions prior to 9.9.1
Description:
The issue is related to the missing X-Frame-Options header, which could allow a clickjacking attack.
Recommendations:
For versions prior to 9.5P18, update to version 9.5P18 or later.
For versions prior to 9.6P15, update to version 9.6P15 or later.
For versions prior to 9.7P14, update to version 9.7P14 or later.
For versions prior to 9.8P5, update to version 9.8P5 or later.
For versions prior to 9.9.1, update to version 9.9.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾