Unscored CVE-2021-26991 EUVD-2021-13764GHSA-9g82-8987-224m

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker t…

Published Mar 19, 2021 · Updated Aug 3, 2024 · Assigned by netapp

Description

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager.

Affected products

Vendor	Product	Affected	Fixed
—	Cloud Manager	Prior to 3.9.4	—

References

https://security.netapp.com/advisory/NTAP-20210318-0002