CVE-2024-21988

published 2024-06-14

CVE-2024-21988: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM…

Priority P4 26 medium 5.3 CVSS 3.1

AV N AC H PR N UI R S U C H I N A N

StorageGRID (formerly StorageGRID Webscale) versions prior to
11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive
information via complex MiTM attacks due to a vulnerability in the SSH
cryptographic implementation.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netapp	storagegrid	< 11.8.0.5	11.8.0.5
netapp	storagegrid	< 11.7.0.9	11.7.0.9
netapp	storagegrid	>= 11.8.0 < 11.8.0.5	11.8.0.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-347