Privilege Escalation in StorageGRID by NetApp
CVE-2021-27006

4.4MEDIUM

Key Information:

Vendor

Netapp

Status
Storagegrid (formerly Storagegrid Webscale)
Vendor
CVE Published:
23 December 2021

What is CVE-2021-27006?

StorageGRID, previously known as StorageGRID Webscale, contains a vulnerability that allows administrative users to escalate their privileges. This can lead to unauthorized modifications of settings within the SANtricity System Manager, potentially affecting the security and integrity of the managed storage systems. Mitigating this issue is crucial for maintaining a secure environment, especially for users of versions prior to 11.5.0.5.

Affected Version(s)

StorageGRID (formerly StorageGRID Webscale) Versions 11.5 prior to 11.5.0.5

References

https://security.netapp.com/advisory/ntap-20211221-0001/
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.