CVE-2024-21988

published 2024-06-14

CVE-2024-21988: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM…

medium 5.3 CVSS 3.1

AV N AC H PR N UI R S U C H I N A N

StorageGRID (formerly StorageGRID Webscale) versions prior to
11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive
information via complex MiTM attacks due to a vulnerability in the SSH
cryptographic implementation.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netapp	storagegrid	< 11.8.0.5	11.8.0.5
netapp	storagegrid	< 11.7.0.9	11.7.0.9
netapp	storagegrid	>= 11.8.0 < 11.8.0.5	11.8.0.5

CWE-347