CVE-2024-21988

Published: Jun 14, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.

Affected (2)

Products: Netapp: Storagegrid

Netapp

1 product

Storagegrid

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Storagegrid	Before 11.7.0.9
Netapp Storagegrid	From 11.8.0 to 11.8.0.5

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (2)

https://security.netapp.com/advisory/ntap-20240614-0010/

Source: security-alert@netapp.com

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20240614-0010/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.