PT-2021-17228

CVE-2021-27003

·

Published

2021-10-12

·

Updated

2021-10-18

Description by

CVSS 3.1
4.7
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Clustered Data ONTAP versions prior to 9.5P18 Clustered Data ONTAP versions prior to 9.6P15 Clustered Data ONTAP versions prior to 9.7P14 Clustered Data ONTAP versions prior to 9.8P5 Clustered Data ONTAP versions prior to 9.9.1
Description: The issue is related to the missing X-Frame-Options header, which could allow a clickjacking attack.
Recommendations: For versions prior to 9.5P18, update to version 9.5P18 or later. For versions prior to 9.6P15, update to version 9.6P15 or later. For versions prior to 9.7P14, update to version 9.7P14 or later. For versions prior to 9.8P5, update to version 9.8P5 or later. For versions prior to 9.9.1, update to version 9.9.1 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾