7.5
Élevée
CVE-2025-26515 StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled…
Description
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the password of any Grid Manager or Tenant Manager non-federated user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| StorageGRID 11.9 | premières → < 11.9.0.8 | 11.9.0.8 |
| StorageGRID 11.8 | premières → < 11.8.0.15 | 11.8.0.15 |
Références
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de StorageGRID
Les 8 CVE de StorageGRID →
CVE-2026-22056
StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are…
2.3
Faible
CVE-2025-26517
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a privilege…
5.4
Moyenne
CVE-2025-26516
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Denial of…
5.3
Moyenne
CVE-2025-26514
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected…
6.4
Moyenne