Authentication Bypass in NetApp SnapCenter Server by NetApp
CVE-2015-7887

8.1HIGH

Key Information:

Vendor

Netapp

Status
Snapcenter Server
Vendor
CVE Published:
7 August 2017

What is CVE-2015-7887?

The vulnerability in NetApp SnapCenter Server 1.0 allows remote authenticated users to exploit the system by gaining unauthorized access to backup functionalities. This flaw enables them to list and delete backups, posing a significant threat to data integrity and overall security management. Attackers could leverage this weakness to manipulate backup records and potentially hinder recovery processes.

References

https://kb.netapp.com/support/s/article/ka51A00000007EnQA...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/77315
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-7887 : Authentication Bypass in NetApp SnapCenter Server by NetApp