| Package | Affected versions | Patched versions |
|---|---|---|
| storagegrid | ≥ 11.9.0, < 11.9.0.8< 11.8.0.15 | 11.9.0.811.8.0.15 |
StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 without Single Sign-on enabled are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. Successful exploit could allow an unauthenticated attacker to change the password of any Grid Manager or Tenant Manager non-federated user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free