PT-2017-7956

CVE-2016-1502

·

Published

2017-02-07

·

Updated

2017-02-24

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions NetApp SnapCenter Server versions 1.0 through 1.0P1
Description The issue allows remote attackers to partially bypass authentication, enabling them to list and delete backups.
Recommendations For versions 1.0 through 1.0P1, update to a version that contains a fix for this issue to prevent unauthorized access and modification of backups.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2016-1502
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com