CVE-2021-26989
https://notcve.org/view.php?id=CVE-2021-26989
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access. Clustered Data ONTAP versiones anteriores a 9.3P21, 9.5P16, 9.6P12, 9.7P9 y 9.8, son susceptibles a una vulnerabilidad que podría permitir a un atacante autenticado remotamente causar una Denegación de Servicio (DoS) en Clustered Data ONTAP configurado para acceso SMB • https://security.netapp.com/advisory/NTAP-20210303-0002 •
CVE-2021-26988
https://notcve.org/view.php?id=CVE-2021-26988
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs. Clustered Data ONTAP versiones anteriores a 9.3P21, 9.5P16, 9.6P12, 9.7P8 y 9.8, son susceptibles a una vulnerabilidad que podría permitir a los usuarios invitados no autorizados detectar información relacionada con la conversión de un directorio 7-Mode a Cluster-mode, como Storage Virtual Machine (SVM), nombres de volumen, rutas de directorio y ID de trabajo • https://security.netapp.com/advisory/NTAP-20210303-0001 • CWE-862: Missing Authorization •