Read-only user escalation vulnerability

CVE-2024-21989

What is CVE-2024-21989?

The ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x, and 9.14.1.x are affected by a vulnerability that allows a read-only user to escalate their privileges to gain unauthorized access. This may lead to significant security risks, as malicious users could exploit this vulnerability to perform actions beyond their permitted access level. Organizations using affected versions should take immediate action to mitigate risks associated with this vulnerability.

References