NetApp CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)

NetApp, Inc. had published a security advisory concerning a resolved vulnerability in StorageGRID.

Advisory ID: NTAP-20240614-0010
Version: 1.0
Last updated: June 14, 2024
Status: Final.
CVEs: CVE-2024-21988

Summary
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.

Impact
Successful exploitation of this vulnerability could lead to disclosure of sensitive information.

Vulnerability Scoring Details

Exploitation and Public Announcements
NetApp is not aware of public discussion regarding this vulnerability.

Affected Products

• StorageGRID (formerly StorageGRID Webscale)

Remediation :

Software Versions and Fixes
NetApp’s currently available patches are listed below.

Workarounds
None at this time.

Obtaining Software Fixes
Software fixes will be made available through the NetApp Support website in the Software Download section.

https://mysupport.netapp.com/site/downloads/

Customers who do not have access to the Support website should contact Technical Support at the number below to obtain the patches.

Contact Information
Check http://mysupport.netapp.com for further updates.
For questions, contact NetApp at:

Technical Support
mysupport.netapp.com
1 888 4 NETAPP (1 888 463 8277) (USA and Canada)
+00 800 44 638277 (EMEA)
+800 800 80 800 (AsiaPac)

Revision History

Status of this Notice : Final

This advisory should be considered the single source of current, up-to-date, authorized and accurate information from NetApp regarding Full Support products and versions.

This advisory is posted at following link:
https://security.netapp.com/advisory/NTAP-20240614-0010

Revision History