Clickjacking Vulnerability in NetApp Snap Creator Framework
CVE-2016-5710

4.6MEDIUM

Key Information:

Vendor

Netapp

Status
Snap Creator Framework
Vendor
CVE Published:
11 February 2020

What is CVE-2016-5710?

The NetApp Snap Creator Framework prior to version 4.3P1 has a vulnerability that allows remote authenticated users to conduct clickjacking attacks through unspecified vectors. This security flaw may enable malicious actors to trick users into performing unintended actions on the web application without their consent, thereby jeopardizing user data and application integrity.

References

https://kb.netapp.com/support/s/article/cve-2016-5710-cli...
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2016-5710 : Clickjacking Vulnerability in NetApp Snap Creator Framework