PT-2025-34547 · Netapp · Storagegrid

Publicado 2025-08-23 · Atualizado 2025-09-20 · CVE-2025-26517

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions StorageGRID versions prior to 11.8.0.15 StorageGRID versions prior to 11.9.0.8

Description StorageGRID is susceptible to a privilege escalation issue. A successful exploit could allow an unauthorized, authenticated attacker to discover Grid node names and IP addresses or modify Storage Grades.

Recommendations Update StorageGRID to version 11.8.0.15 or later. Update StorageGRID to version 11.9.0.8 or later.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2025-26517

Produtos afetados

Storagegrid

Referências · 5

• https://osv.dev/vulnerability/CVE-2025-26517 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-26517 · Nota de Segurança
• https://twitter.com/CVEnew/status/1969291934171623856 · Publicação no Twitter
• https://security.netapp.com/advisory/NTAP-20250910-0004 · Aviso do Fabricante
• https://twitter.com/Cezar_H_Linux/status/1959329817846779912 · Publicação no Twitter