2.3Baja
CVE-2026-22051
Descripción
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Debilidad (CWE):
CWE-200
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| netapp | storagegrid | < 11.9.0.13 | |
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | < 11.9.0.13, < 12.0.0.6 |
Referencias y parches
- https://security.netapp.com/advisory/ntap-20260420-0001 vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*< 11.9.0.13cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*≥ 12.0 < 12.0.0.6