Description
StorageGRID (formerly
StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without
Single Sign-on enabled are susceptible to a Server-Side Request Forgery
(SSRF) vulnerability. Successful exploit could allow an unauthenticated
attacker to change the password of any Grid Manager or Tenant Manager
non-federated user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetApp | StorageGRID | < 11.8.0.15, < 11.9.0.8 | 11.8.0.15 |
Advisories 1
- WID-SEC-2025-2037 NetApp StorageGRID: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 21, 2025