How severe is CVE-2024-21982?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Vulnerability in NetApp Clustered Data Ontap

CVE-2024-21982

ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user.

EPSS: 0.004 (30.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Netapp Clustered_data_ontap — versions 9.8, 9.9.1, 9.10.1
Netapp Ontap 9 — versions 9.4, 9.9.1, 9.10.1

References

security-alert@netapp.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-21982?: CVE-2024-21982 is a medium-severity vulnerability in NetApp Clustered Data Ontap. CVSS score: 4.8/10. Published 2024-01-12.
How severe is CVE-2024-21982?: Medium severity. CVSS v3 base score is 4.8 out of 10.