{"status":"success","advisory":{"_id":"683547345b16347a91c3a044","kb_acknowledgements":null,"kb_affected_list":["Active IQ Unified Manager for Linux","Active IQ Unified Manager for Microsoft Windows","E-Series SANtricity OS Controller Software","E-Series SANtricity Unified Manager and Web Services Proxy","Element Plug-in for vCenter Server","Management Services for Element Software and NetApp HCI","NetApp SANtricity Cloud Connector","SANtricity Storage Plugin for vCenter","Snap Creator Framework","SnapManager for SAP"],"kb_bad_data":false,"kb_cve":["CVE-2021-34428"],"kb_exploitation":"Public","kb_fixes":[{"product":"Active IQ Unified Manager for Linux","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/activeiq-unified-manager/downloads-tab/download/62791/9.6","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"Active IQ Unified Manager for Microsoft Windows","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/activeiq-unified-manager/downloads-tab/download/62791/9.6","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"E-Series SANtricity OS Controller Software","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/eseries-santricityos/downloads-tab/download/62735/11.70.2","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"E-Series SANtricity Unified Manager and Web Services Proxy","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/eseries-unifiedmgr/downloads-tab/download/62737/5.2","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"Element Plug-in for vCenter Server","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/mgmtservices/downloads-tab/download/63086/2.21.61","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"Management Services for Element Software and NetApp HCI","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/mgmtservices/downloads-tab/download/63086/2.19.48/","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"NetApp SANtricity Cloud Connector","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2878611.html"},{"product":"SANtricity Storage Plugin for vCenter","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/eseries-plugin-vcenter/downloads-tab/download/63788/1.20","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"Snap Creator Framework","fixes":[{"link":"https://mysupport.netapp.com/site/products/all/details/snapcreator/downloads-tab/download/61011/4.3.3P6","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"SnapManager for SAP","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2857475.html"}],"kb_impact":"Successful exploitation of this vulnerability could lead to disclosure of sensitive information or addition or modification of data.","kb_internal_notes":[{"burt":"1413265","jira":"","product":"Active IQ Unified Manager for Linux"},{"burt":"1413267","jira":"","product":"Active IQ Unified Manager for Microsoft Windows"},{"burt":"","jira":"CAIQUM-9854","product":"Active IQ Unified Manager for VMware vSphere"},{"burt":"1413250","jira":"","product":"E-Series SANtricity OS Controller Software"},{"burt":"1413248","jira":"","product":"E-Series SANtricity Unified Manager and Web Services Proxy"},{"burt":"1413281","jira":"","product":"Element Plug-in for vCenter Server"},{"burt":"1413252","jira":"","product":"Management Services for Element Software and NetApp HCI"},{"burt":"1413263","jira":"","product":"NetApp Console Agent"},{"burt":"","jira":"PSIRT-45238","product":"NetApp Console Agent Container (credentials_v3)"},{"burt":"","jira":"PSIRT-45239","product":"NetApp Console Agent Container (docker_occm)"},{"burt":"","jira":"PSIRT-45240","product":"NetApp Console Agent Container (prometheus)"},{"burt":"","jira":"PSIRT-45241","product":"NetApp Console Agent Container (vault-controller)"},{"burt":"1413255","jira":"","product":"NetApp E-Series Performance Analyzer"},{"burt":"1413279","jira":"","product":"NetApp HCI Compute Node (Bootstrap OS)"},{"burt":"1413249","jira":"","product":"NetApp SANtricity Cloud Connector"},{"burt":"1413257","jira":"","product":"NetApp SolidFire & HCI Management Node"},{"burt":"1413280","jira":"","product":"NetApp SolidFire & HCI Storage Node (Element Software)"},{"burt":"1413259","jira":"","product":"NetApp VASA Provider for Clustered Data ONTAP 9.7 and above"},{"burt":"1413269","jira":"","product":"SANtricity Storage Plugin for vCenter"},{"burt":"1413273","jira":"","product":"Snap Creator Framework"},{"burt":"1413271","jira":"","product":"SnapCenter"},{"burt":"1413253","jira":"","product":"SnapCenter Plug-in for VMware vSphere"},{"burt":"1413275","jira":"","product":"SnapManager for Oracle"},{"burt":"1413278","jira":"","product":"SnapManager for Oracle Windows"},{"burt":"1413277","jira":"","product":"SnapManager for SAP"},{"burt":"1413251","jira":"","product":"Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above"},{"burt":"","jira":"PSIRT-45243","product":"StorageGRID (formerly StorageGRID Webscale)"},{"burt":"1413284","jira":"","product":"Virtual Storage Console for VMware vSphere 9.7 and above"}],"kb_investigating_list":["NetApp Console Agent Container (credentials_v3)","NetApp Console Agent Container (docker_occm)","NetApp Console Agent Container (prometheus)","NetApp Console Agent Container (vault-controller)"],"kb_num":"9010000","kb_ref":[],"kb_rev_history":[{"comment":"Initial Public Release","date":"20210813","version":"1.0"},{"comment":"SnapManager for Oracle moved to Products Not Affected and SnapManager for SAP moved to Affected Products","date":"20211008","version":"2.0"},{"comment":"Management Services for Element Software and NetApp HCI moved to Affected Products","date":"20211011","version":"3.0"},{"comment":"Management Services for Element Software and NetApp HCI added to Software Versions and Fixes","date":"20211022","version":"4.0"},{"comment":"NetApp SANtricity Cloud Connector moved to Won't Fix status","date":"20211102","version":"5.0"},{"comment":"Snap Creator Framework added to Software Versions and Fixes","date":"20211108","version":"6.0"},{"comment":"E-Series SANtricity Web Services (REST API) for Web Services Proxy, and SANtricity Storage Plugin for vCenter added to Software Versions and Fixes","date":"20220106","version":"7.0"},{"comment":"E-Series SANtricity OS Controller Software 11.x added to Software Versions and Fixes","date":"20220114","version":"8.0"},{"comment":"SnapManager for Oracle Windows moved to Products Not Affected","date":"20220722","version":"9.0"},{"comment":"SnapManager for SAP moved to Won't Fix status","date":"20220915","version":"10.0"},{"comment":"Element Plug-in for vCenter Server added to Software Versions and Fixes, Final status","date":"20221109","version":"11.0"},{"comment":"StorageGRID (formerly StorageGRID Webscale), NetApp Console Agent Container (vault-controller), NetApp Console Agent Container (prometheus), NetApp Console Agent Container (docker_occm), NetApp Console Agent Container (credentials_v3) and Active IQ Unified Manager for VMware vSphere moved to Products Under Investigation","date":"20261006","version":"12.0"},{"comment":"StorageGRID (formerly StorageGRID Webscale) moved to Products Not Affected","date":"20261007","version":"13.0"},{"comment":"Active IQ Unified Manager for VMware vSphere moved to Products Not Affected","date":"20261008","version":"14.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2021-34428":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},"kb_scoring_calc":[{"cve_id":"CVE-2021-34428","range":"LOW","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"kb_status":"Interim","kb_summary":"Multiple NetApp products incorporate Eclipse Jetty. Eclipse Jetty versions through 9.4.40, 10.0.2 and 11.0.2 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information or addition or modification of data.","kb_title":"CVE-2021-34428 Eclipse Jetty Vulnerability in NetApp Products","kb_unaffected_list":["AFF Baseboard Management Controller (BMC) - A700s","ATTO FibreBridge - 7600N","Active IQ Config Advisor","Active IQ Unified Manager for VMware vSphere","Active IQ mobile app","Brocade Fabric Operating System Firmware","Brocade SAN Navigator (SANnav)","Cloud Volumes ONTAP Mediator","Data Infrastructure Insights Acquisition Unit","Data Infrastructure Insights Telegraf Agent","Data Infrastructure Insights and Data Secure Storage Workload Security Agent","E-Series BIOS","Element .NET SDK","Element HealthTools","Element JAVA SDK","Element Python SDK","FAS/AFF BIOS - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250","FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750","Global File Cache","MetroCluster Tiebreaker","NetApp Console Agent","NetApp E-Series Performance Analyzer","NetApp HCI Baseboard Management Controller (BMC) - H610S","NetApp HCI Compute Node (Bootstrap OS)","NetApp HCI Storage Node BIOS","NetApp Manageability SDK","NetApp NFS Plug-in for VMware VAAI","NetApp ONTAP PowerShell Toolkit (PSTK)","NetApp SMI-S Provider","NetApp SolidFire & HCI Management Node","NetApp SolidFire & HCI Storage Node (Element Software)","NetApp SolidFire Plug-in for vRealize Orchestrator (SolidFire vRO)","NetApp VASA Provider for Clustered Data ONTAP 9.7 and above","NetApp XCP NFS","NetApp XCP SMB","ONTAP 9","ONTAP Antivirus Connector","ONTAP Mediator","ONTAP Select Deploy administration utility","OnCommand Insight","SAN Host Utilities for Linux","SAN Host Utilities for Windows","SRA Plugin for Linux","SRA Plugin for Windows","SnapCenter","SnapCenter Plug-in for VMware vSphere","SnapManager for Oracle","SnapManager for Oracle Windows","SolidFire Storage Replication Adapter","Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above","StorageGRID (formerly StorageGRID Webscale)","StorageGRID BIOS SG1000/SG100/SG1100/SG110","StorageGRID BIOS SG5660/SG5612/SG5760/SG5712","StorageGRID BIOS SG6060/SGF6024/SGF6112/SG6160","StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100","System Manager 9.x","Trident","Virtual Storage Console for VMware vSphere 9.7 and above"],"kb_workarounds":"None at this time.","ntap_advisory_id":"NTAP-20210813-0003","adv_id":"ntap-20210813-0003","published_date":"2021-08-13T00:00:00","updated_date":"2026-10-08T00:00:00","inserted_date":"2026-10-08T12:55:29.471000","modified_date":null}}