StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could allow an authenticated attacker with low privileges to run arbitrary metrics queries, revealing metric results that they do not have access to.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.netapp.com/advisory/ntap-20260420-0001 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.3 · netappNVD modified 2026-10-25 23:10
Affected (CPE criteria) 1
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*
References 1
- https://security.netapp.com/advisory/ntap-20260420-0001 Vendor Advisory