Lucene search
HistoryFeb 16, 2024 - 9:15 p.m.
CVE-2024-21987
snapcenter
vulnerability
authenticated user
modify logging settings
cve-2024-21987
nvd
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
SnapCenter versions 4.8 prior to 5.0 are susceptible to a
vulnerability which could allow an authenticated SnapCenter Server user
to modify system logging configuration settings
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SnapCenter",
"vendor": "NetApp",
"versions": [
{
"lessThan": "5.0",
"status": "affected",
"version": "4.8",
"versionType": "general release"
}
]
}
]Related
prion
prion
Spoofing
2024-02-16 21:15:00
cvelist
cvelist
CVE-2024-21987 Improper Authorization Vulnerability in SnapCenter
2024-02-16 20:27:34
nvd
nvd
CVE-2024-21987
2024-02-16 21:15:08
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-21987