2.3Düşük
CVE-2026-22051
Açıklama
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| netapp | storagegrid | < 11.9.0.13 | |
| NETAPP | StorageGRID (formerly StorageGRID Webscale) | < 11.9.0.13, < 12.0.0.6 |
Kaynaklar ve yamalar
- https://security.netapp.com/advisory/ntap-20260420-0001 vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*< 11.9.0.13cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*≥ 12.0 < 12.0.0.6