PT-2021-17223 · Netapp · Santricity Os Controller

Published 2021-06-11 · Updated 2021-06-22 · CVE-2021-26997

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: E-Series SANtricity OS Controller Software versions prior to 11.70.1

Description: The issue allows a remote attacker to discover information via error messaging, which may aid in crafting more complex attacks. This could potentially be exploited to gain more insight into the system, facilitating further attacks.

Recommendations: For versions prior to 11.70.1, update to version 11.70.1 or later to resolve the issue.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2021-26997

Affected Products

Santricity Os Controller

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26997 · Security Note
• https://security.netapp.com/advisory/NTAP-20210610-0004 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26997 · Vendor Advisory
• https://t.me/cvenotify/16680 · Telegram Post
• https://t.me/cvenotify/16187 · Telegram Post