Skip to content
fr Sign in
7.6 High

CVE-2024-21985 ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability…

Description

ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include viewing limited configuration details and metrics or modifying limited settings, some of which could result in a Denial of Service (DoS).

Affected products and versions

Product Affected versions Fixed in
ONTAP 9 9.13 earliest → < 9.13.1P4 9.13.1P4
ONTAP 9 9.12 earliest → < 9.12.1P10 9.12.1P10
ONTAP 9 9.11 earliest → < 9.11.1P13 9.11.1P13
ONTAP 9 9.10 earliest → < 9.10.1P16 9.10.1P16
ONTAP 9 9.0 9.0 → < 9.9.1P18 9.9.1P18

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ONTAP 9

The 8 CVEs of ONTAP 9 →
CVE-2026-22063 CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products 6.0 Medium CVE-2026-22049 ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a… 8.7 High CVE-2026-22052 ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability 5.3 Medium CVE-2026-22050 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to… 6.9 Medium
Track this CVE