CVE-2025-66170

The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and has access to specific APIs can list backups from any account in the environment...

CVE-2025-66170: Incorrect Authorization

The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and has access to specific APIs can list backups from any account in the environment...

CVE-2015-7887: Improper Access Control

NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups...

PT-2017-7289

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server version 1.0 Description The issue allows remote authenticated users to list and delete backups. Recommendations For NetApp SnapCenter Server version 1.0, update to a version that contains a fix for this issue, however ...

CVE-2016-1502: Improper Authentication

NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors...

PT-2017-7956

Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions 1.0 through 1.0P1 Description The issue allows remote attackers to partially bypass authentication, enabling them to list and delete backups. Recommendations For versions 1.0 through 1.0P1, update to a version...