2.3Niedrig
CVE-2026-22051
Beschreibung
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Schwachstellentyp (CWE):
CWE-200
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| netapp | storagegrid | < 11.9.0.13 | |
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | < 11.9.0.13, < 12.0.0.6 |
Referenzen und Patches
- https://security.netapp.com/advisory/ntap-20260420-0001 vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*< 11.9.0.13cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*≥ 12.0 < 12.0.0.6