What is the severity of CVE-2021-27004?

CVE-2021-27004 is considered a high severity vulnerability as it allows local attackers to access sensitive plaintext iSCSI CHAP credentials.

How do I fix CVE-2021-27004?

To fix CVE-2021-27004, upgrade to System Manager versions 9.7P16, 9.8P7, or 9.9.1P2 or later.

What versions of NetApp System Manager are affected by CVE-2021-27004?

Versions 9.7 and above prior to 9.7P16, 9.8P7, and 9.9.1P2 of NetApp System Manager are affected by CVE-2021-27004.

Can CVE-2021-27004 be exploited remotely?

No, CVE-2021-27004 can only be exploited by local attackers with access to the affected system.

What are the potential impacts of CVE-2021-27004?

The potential impacts of CVE-2021-27004 include unauthorized access to iSCSI CHAP credentials, which could lead to further exploitation of network storage systems.

Vulnerability/
CVE-2021-27004

medium

5.5

1/11/2021

3/8/2024

CVE-2021-27004

First published: Mon Nov 01 2021(Updated: )

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials.

Credit: security-alert@netapp.com

Affected Software	Affected Version	How to fix
NetApp OnCommand System Manager	>=9.0<9.7
NetApp OnCommand System Manager	=9.7
NetApp OnCommand System Manager	=9.8
NetApp OnCommand System Manager	=9.9.12

Remedy

https://security.netapp.com/advisory/NTAP-20211029-0001/

Never miss a vulnerability like this again

Reference Links

https://security.netapp.com/advisory/NTAP-20211029-0001/

Frequently Asked Questions

What is the severity of CVE-2021-27004?
CVE-2021-27004 is considered a high severity vulnerability as it allows local attackers to access sensitive plaintext iSCSI CHAP credentials.
How do I fix CVE-2021-27004?
To fix CVE-2021-27004, upgrade to System Manager versions 9.7P16, 9.8P7, or 9.9.1P2 or later.
What versions of NetApp System Manager are affected by CVE-2021-27004?
Versions 9.7 and above prior to 9.7P16, 9.8P7, and 9.9.1P2 of NetApp System Manager are affected by CVE-2021-27004.
Can CVE-2021-27004 be exploited remotely?
No, CVE-2021-27004 can only be exploited by local attackers with access to the affected system.
What are the potential impacts of CVE-2021-27004?
The potential impacts of CVE-2021-27004 include unauthorized access to iSCSI CHAP credentials, which could lead to further exploitation of network storage systems.

agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/author
agent/severity
agent/references
agent/event
agent/first-publish-date
agent/description
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/netapp
canonical/netapp oncommand system manager
version/netapp oncommand system manager/9.0
version/netapp oncommand system manager/9.7
version/netapp oncommand system manager/9.8
version/netapp oncommand system manager/9.9.12

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.