CVE-2024-21988

CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

State: Published
Severity: 5.3 Medium
Published: Jun 14, 2024
Updated: Nov 12, 2024
Reserved: Jan 3, 2024

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N	netapp

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
StorageGRID (formerly StorageGRID Webscale)NetApp	before 11.7.0.9Affected before 11.8.0.5Affected

References

https://security.netapp.com/advisory/ntap-20240614-0010/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.