NetApp SnapCenter 路径遍历漏洞

NetApp SnapCenter is a suite of applications from Network Appliance NetApp that provides the ability to back up, verify, clone, and restore NetApp storage systems. A security vulnerability exists in NetApp SnapCenter. An attacker exploited the vulnerability to gain access to data in order to read...

NetApp SnapCenter Information Disclosure Vulnerability - Lenovo Support US

No description provided...

CVE-2018-5482

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...

Cross site scripting

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

CVE-2018-5482: Missing Encryption of Sensitive Data

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel...

CVE-2017-15515: Improper Neutralization of Input During Web Page Generation

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

NetApp SnapCenter Information Disclosure Vulnerability

NetApp SnapCenter is a suite of applications from NetApp, Inc. that provide the ability to back up, validate, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server version... A security vulnerability exists in NetApp SnapCenter versions 2.0 through 3.0.1. A remote attacke...

NetApp SnapCenter Server Cross-Site Request Forgery Vulnerability

NetApp SnapCenter is a suite of applications from NetApp, Inc. that provide the ability to back up, validate, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server version... A cross-site request forgery vulnerability exists in NetApp SnapCenter Server versions 1.1 throug...

CVE-2017-15516

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...

CVE-2017-15516: Cross-Site Request Forgery (CSRF)

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...

CVE-2015-7887

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

CVE-2015-7887: Improper Access Control

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

CVE-2016-1502: Improper Authentication

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. An authentication bypass vulnerability exists in NetApp SnapCenter Server, which could be exploited by remote attackers...