CVE-2017-15519

CWE-287 — Improper Authentication3 documents3 sources
Severity
7.2HIGH
EPSS
0.4%
top 38.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Netapp Snapcenter ServerNetapp Snapcenter
Timeline
PublishedMar 6
Latest updateMay 13

Description

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.7

Affected Packages2 packages

▶NVDnetapp/snapcenter_server2.0 — 3.0.1
▶CVEListV5netapp/snapcenterVersions 2.0 through 3.0.1

🔴Vulnerability Details

2
GHSA
GHSA-9393-ff8q-r5g5: Versions of SnapCenter 2↗2022-05-13
▶
CVEList
CVE-2017-15519: Versions of SnapCenter 2↗2018-03-06
▶
CVE-2017-15519 (HIGH CVSS 7.2) | Versions of SnapCenter 2.0 through | cvebase.io