Lucene search

NetappCVE-2023-27316

HistoryOct 12, 2023 - 10:15 p.m.

CVE-2023-27316

2023-10-1222:15:09

CWE-269

netapp

web.nvd.nist.gov

cve-2023-27316

snapcenter

vulnerability

admin access

authenticated user

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

SnapCenter versions 4.8 through 4.9 are susceptible to a
vulnerability which may allow an authenticated SnapCenter Server user to
become an admin user on a remote system where a SnapCenter plug-in has
been installed.

Affected configurations

Nvd

Node

netappsnapcenterRange4.8–4.9

VendorProductVersionCPE
netappsnapcenter*cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netapp	snapcenter	*	cpe:2.3:a:netapp:snapcenter::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SnapCenter",
    "vendor": "NetApp",
    "versions": [
      {
        "lessThanOrEqual": "4.9",
        "status": "affected",
        "version": "4.8",
        "versionType": "custom"
      }
    ]
  }
]

References

security.netapp.com/advisory/NTAP-20231012-0001/

security.netapp.com/advisory/ntap-20231012-0001/

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-27316