Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-21988 EUVD-2024-19594GHSA-9x5q-pwr2-hwvp

CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

Published Jun 14, 2024 · Updated Nov 12, 2024 · Assigned by netapp

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to
11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive
information via complex MiTM attacks due to a vulnerability in the SSH
cryptographic implementation.

Affected products

VendorProductAffectedFixed
NetApp StorageGRID (formerly StorageGRID Webscale) < 11.7.0.9, < 11.8.0.5 11.7.0.9

Advisories 1

References