PT-2021-17229 · Unknown · Systems Manager

Published 2021-11-01 · Updated 2022-07-12 · CVE-2021-27004

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: System Manager 9.x versions 9.7 through 9.7P15 System Manager 9.x versions 9.8 through 9.8P6 System Manager 9.x version 9.9.1P1

Description: The issue allows a local attacker to discover plaintext iSCSI CHAP credentials.

Recommendations: For versions 9.7 through 9.7P15, update to version 9.7P16 or later. For versions 9.8 through 9.8P6, update to version 9.8P7 or later. For version 9.9.1P1, update to version 9.9.1P2 or later.

Fix

Related Identifiers

CVE-2021-27004

Affected Products

Systems Manager

References · 6

• https://osv.dev/vulnerability/CVE-2021-27004 · Vendor Advisory
• https://security.netapp.com/advisory/NTAP-20211029-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27004 · Security Note
• https://t.me/cibsecurity/31543 · Telegram Post
• https://t.me/cvenotify/22806 · Telegram Post
• https://t.me/cvenotify/22799 · Telegram Post