{"id":"CVE-2018-5495","aliases":["EUVD-2018-17264","GHSA-f3j2-qmmf-mrrq"],"status":"published","title":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an...","description":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01591,"percentile":0.7581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-11-14T19:00:00Z","modified":"2026-06-17T02:00:24Z","products":[{"vendor":"netapp","product":"storagegrid webscale"},{"vendor":"netapp","product":"storagegrid_webscale"}],"references":[{"url":"https://security.netapp.com/advisory/ntap-20181114-0001/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5495"},{"url":"https://github.com/advisories/GHSA-f3j2-qmmf-mrrq"}],"sources":{"cve":[{"id":"CVE-2018-5495","description":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.","status":"published","published":"2018-11-14T19:00:00Z","modified":"2024-08-05T05:40:50.566Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17264","description":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.","status":"published","published":"2018-11-14T19:00:00Z","modified":"2024-08-05T05:40:50Z","updated_at":"2026-11-03T02:40:10.651692Z"}],"ghsa":[{"id":"GHSA-f3j2-qmmf-mrrq","title":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an...","description":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.","status":"published","published":"2022-05-13T01:52:49Z","modified":"2023-02-02T05:02:19Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:51:24.995331Z"}],"nvd":[{"id":"CVE-2018-5495","description":"All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.","status":"published","published":"2018-11-14T19:29:00.357Z","modified":"2026-06-17T02:00:24.693Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}