netapp snapcenter - vulnerabilities and exploits

(subscribe to this query)

SnapCenter versions before 5.0p1 are susceptible to a vulnerability which could allow an authenticated malicious user to discover plaintext credentials.

Netapp Snapcenter Netapp Snapcenter 5.0

SnapCenter versions 4.7 before 4.7P2 and 4.8 before 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated malicious user to gain access as an admin user.

Netapp Snapcenter 4.7 Netapp Snapcenter 4.8

NetApp SnapCenter Server versions 1.1 up to and including 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.

Netapp Snapcenter Server 1.1 Netapp Snapcenter Server 2.0

SnapCenter versions before 4.5 are susceptible to a vulnerability which could allow a local authenticated malicious user to discover plaintext HANA credentials.

Netapp Snapcenter

SnapCenter versions 4.8 up to and including 4.9 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been installed.

Netapp Snapcenter

SnapCenter versions before 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

Netapp Snapcenter

SnapCenter versions 3.x and 4.x before 4.9 are susceptible to a vulnerability which may allow an authenticated unprivileged user to gain access as an admin user.

Netapp Snapcenter

Versions of SnapCenter 2.0 up to and including 3.0.1 allow unauthenticated remote malicious users to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 followin...

Netapp Snapcenter Server

NetApp SnapCenter Server before 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

Netapp Snapcenter Server

NetApp SnapCenter Server before 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.

Netapp Snapcenter Server

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook