Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere
CVE-2023-27312

4.3MEDIUM

Key Information:

Vendor

NetApp

Status
SnapCenter Plugin for VMware vSphere
Vendor
CVE Published:
12 October 2023

What is CVE-2023-27312?

SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.

Affected Version(s)

SnapCenter Plugin for VMware vSphere 4.6 < 4.9

References

https://security.netapp.com/advisory/ntap-20230713-0001/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.