1. Home
  2. CVE Database
  3. CVE-2017-15519
HIGH · 7.2

CVE-2017-15519

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0...

Vulnerability Description

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation.

CVSS Score

7.2

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
NetappSnapcenter Server>= 2.0, <= 3.0.1

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2017-15519?

CVE-2017-15519 is a vulnerability with a CVSS score of 7.2 (HIGH). Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0...

How severe is CVE-2017-15519?

CVE-2017-15519 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-15519?

Check the references section above for vendor advisories and patch information. Affected products include: Netapp Snapcenter Server.