PT-2020-20214 · Netapp · Storagegrid

Published 2020-03-13 · Updated 2020-03-18 · CVE-2020-8571

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4

Description The issue allows an unauthenticated remote attacker to cause a Denial of Service (DoS).

Recommendations For versions 10.0.0 through 11.2.0.7, update to version 11.2.0.8 or later. For versions 11.3.0.0 through 11.3.0.3, update to version 11.3.0.4 or later. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-8571

Affected Products

Storagegrid

References · 4

• https://security.netapp.com/advisory/ntap-20200313-0005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8571 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8571 · Vendor Advisory
• https://t.me/cvenotify/1639 · Telegram Post