CVE-2017-15519

概要

参考情報

• security.netapp.com/advisory/ntap-20180306-0001 · Mitigation

snapcenter server のその他の脆弱性

• CVE-2018-5482中 5.3NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmissi…
• CVE-2017-15515中 4.8NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbi…
• CVE-2017-15516高 8.8NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used t…
• CVE-2015-7887高 8.1NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
• CVE-2016-1502高 7.3NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspe…