Lucene search

[email protected]CVE-2015-7887

HistoryAug 07, 2017 - 5:29 p.m.

CVE-2015-7887

2017-08-0717:29:00

CWE-284

[email protected]

web.nvd.nist.gov

netapp

snapcenter

server

1.0

remote

authenticated

users

backup

listing

deletion

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.

Affected configurations

NVD

Node

netappsnapcenter_serverMatch1.0

CPENameOperatorVersion
netapp:snapcenter_servernetapp snapcenter servereq1.0

CPE	Name	Operator	Version
netapp:snapcenter_server	netapp snapcenter server	eq	1.0

References

www.securityfocus.com/bid/77315

kb.netapp.com/support/s/article/ka51A00000007EnQAI/authentication-bypass-vulnerability-in-snapcenter-server-1-0?language=en_US

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

Related for CVE-2015-7887

cvelist1 prion1 nvd1