Lucene search

K
vulnrichmentNetappVULNRICHMENT:CVE-2023-27316
HistoryOct 12, 2023 - 9:04 p.m.

CVE-2023-27316 Privilege Escalation Vulnerability in SnapCenter

2023-10-1221:04:47
CWE-269
netapp
github.com
snapcenter
privilege escalation
vulnerability
cve-2023-27316
admin user
snapcenter server
snapcenter plug-in

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

SnapCenter versions 4.8 through 4.9 are susceptible to a
vulnerability which may allow an authenticated SnapCenter Server user to
become an admin user on a remote system where a SnapCenter plug-in has
been installed.

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-27316