Read the docs
TI-2022-07367 Aliases CVE-2022-23232GHSA-wxfv-cvrq-p386

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a…

Priority LOW 24Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had access. StorageGRID 11.6.0 obtains the user account status from Active Directory or Azure and will block S3 access for disabled user accounts during the subsequent background synchronization. User accounts that are expired or locked for Active Directory or Azure, or user accounts that are disabled, expired, or locked in identity sources other than Active Directory or Azure must be manually removed from group memberships or have their S3 keys manually removed from Tenant Manager in all versions of StorageGRID (formerly StorageGRID Webscale).

Why it matters now

EPSS 0.00765 55th percentileScored 2026-11-07
Fix Fixed StorageGRID (formerly StorageGRID Webscale): 11.6.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—StorageGRID (formerly StorageGRID Webscale)before 11.6.011.6.0Patch availableCNA
  • StorageGRID (formerly StorageGRID Webscale) Vendor— Affected before 11.6.0 Fixed in 11.6.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*before 11.6.0VulnerableNetApp
  • cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:* Versions before 11.6.0 Vulnerable ·NetApp

Remediation

  • Fix · CNA StorageGRID (formerly StorageGRID Webscale) Fixed in 11.6.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23232
  2. 2026-10-03 Alias added: GHSA-wxfv-cvrq-p386

References

Advisory 1

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
  • TI-2025-18946 Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential) CVSS 4.0CRITICAL 9.3
  • TI-2025-18945 ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential) CVSS 4.0CRITICAL 9.3
  • TI-2022-00687 Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVSS 3.1HIGH 7.5
  • TI-2017-11487 Improper input validation in Apache HTTP Server CVSS 3.0HIGH 8.1
See all 72 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences