CVE-2024-21988: SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21988?
CVE-2024-21988 is considered a high severity vulnerability due to the potential for sensitive information disclosure via MitM attacks.
How do I fix CVE-2024-21988?
To fix CVE-2024-21988, upgrade your StorageGRID version to 11.7.0.9 or 11.8.0.5 or later.
What versions of StorageGRID are affected by CVE-2024-21988?
CVE-2024-21988 affects StorageGRID versions prior to 11.7.0.9 and versions from 11.8.0.0 up to but not including 11.8.0.5.
What type of attacks does CVE-2024-21988 facilitate?
CVE-2024-21988 facilitates complex Man-in-the-Middle (MitM) attacks that can lead to the disclosure of sensitive information.
Is there a workaround for CVE-2024-21988?
There are no documented workarounds for CVE-2024-21988; updating to a fixed version is the recommended approach.