Vulnerability Description
ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netapp | Clustered Data Ontap | >= 9.4, < 9.8 |
References
- https://security.netapp.com/advisory/ntap-20240111-0001/Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240111-0001/Vendor Advisory
FAQ
What is CVE-2024-21982?
CVE-2024-21982 is a vulnerability with a CVSS score of 4.8 (MEDIUM). ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store p...
How severe is CVE-2024-21982?
CVE-2024-21982 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-21982?
Check the references section above for vendor advisories and patch information. Affected products include: Netapp Clustered Data Ontap.