CVE-2017-15519

published 2018-03-06

CVE-2017-15519: Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services…

high 7.2 CVSS 3.0

AV N AC L PR N UI N S C C L I L A N

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
netapp	snapcenter	—	—
netapp	snapcenter_server	2.0 – 3.0.1	—

CWE-287