Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in NetApp StorageGRID ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.
Product
NetApp StorageGRID ist eine softwaredefinierte, objektbasierte Speicherlösung.
Vulnerabilities 2
-
Medium 6.5
Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot.
-
Medium 5.9
Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting (XSS) vulnerability. Successful exploit requires the attacker to know specific information about the target instance an…
Revision history
-
#1
Initiale Fassung
References
-
NetApp Product Security vom 2024-02-18
https://security.netapp.com/advisory/ntap-20240216-0012/
-
NetApp Product Security vom 2024-02-18
https://security.netapp.com/advisory/ntap-20240216-0013/