PT-2024-19140 · Netapp · Storagegrid
CVE-2024-21988
·
Published
2024-06-14
·
Updated
2024-12-13
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.5
Description
The issue allows for the disclosure of sensitive information via complex Man-in-the-Middle (MiTM) attacks due to a vulnerability in the SSH cryptographic implementation.
Recommendations
For versions prior to 11.7.0.9, update to version 11.7.0.9 or later.
For versions prior to 11.8.0.5, update to version 11.8.0.5 or later.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Storagegrid