NetApp StorageGRID authentication bypass
Anyone can get into a company's large storage system without permission!
Summary
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher let an attacker with product-specific knowledge who can communicate with the Grid Network on certain ports make unauthorized requests. Environments where an attacker can reach the internal network are affected.
Affected when
- attacker can communicate with the Grid Network on certain ports
What to do
No source states a fixed version. Check that the installed version is newer than the bound for its line (11.9.0.15, 12.0.0.9, 12.1.0.1) and read the NetApp advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen