Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-21988

CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetApp StorageGRID (formerly StorageGRID Webscale)

Default version status: unaffected

  • 0 to < 11.7.0.9affected
  • 0 to < 11.8.0.5affected

References