CVE-2024-21982: CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9
ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21982?
CVE-2024-21982 has a medium severity rating due to its potential to disclose sensitive information.
How do I fix CVE-2024-21982?
To fix CVE-2024-21982, upgrade to NetApp Clustered Data ONTAP version 9.9.1 or later.
Which versions of NetApp are affected by CVE-2024-21982?
CVE-2024-21982 affects NetApp Clustered Data ONTAP versions 9.4 to 9.8 and select later versions.
What type of attack does CVE-2024-21982 enable?
CVE-2024-21982 enables unprivileged attackers to gain access to sensitive information.
Who can exploit CVE-2024-21982?
CVE-2024-21982 can be exploited by unprivileged attackers when the object-store profiler command is executed by an administrative user.