StorageGRID (formerly StorageGRID Webscale) vulnerabilities
3 known vulnerabilities in StorageGRID (formerly StorageGRID Webscale) from NetApp. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
StorageGRID (formerly StorageGRID Webscale): Authentication Bypass Using an Alternate Path or Channel
StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.
- 7.1 High severity
StorageGRID (formerly StorageGRID Webscale): Server-Side Request Forgery
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID (formerly Azure AD) as an IdP are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Succe
- 7.5 High severity
StorageGRID (formerly StorageGRID Webscale): Uncaught Exception
StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to a crash of the Local Distribution Router (LDR) service.