CVE-2024-21985

Summary

CVE-2024-21985 is a vulnerability affecting ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10, and 9.13.1P4. An authenticated user with multiple remote accounts and varying roles can exploit this issue via the REST API to perform actions beyond their intended privileges. This may result in the unauthorized viewing of limited configuration details and metrics or the modification of certain settings, leading to a potential Denial of Service (DoS) impact.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.