CVE-2024-21985
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Privilege Escalation Vulnerability in ONTAP 9
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include viewing limited configuration details and metrics or modifying limited settings, some of which could result in a Denial of Service (DoS).
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ONTAP 9
- Vendor
- NetApp
- Product
- ONTAP 9
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.0 | affected | patch | 9.9.1P18 | Unavailable | None listed |
| 9.10.1 | affected | patch | 9.10.1P16 | Unavailable | None listed |
| 9.11.1 | affected | patch | 9.11.1P13 | Unavailable | None listed |
| 9.12.1 | affected | patch | 9.12.1P10 | Unavailable | None listed |
| 9.13.1 | affected | patch | 9.13.1P4 | Unavailable | None listed |