CVE-2015-7817
HighSummary
A race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before version 7.3.1.5 and Lenovo Switch Center before version 8.1.2.0 allows remote attackers to obtain privileged-account access. Attackers can exploit this to provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data, potentially leading to serious security breaches and loss of confidentiality.
Recommendation
It is recommended to update IBM System Networking Switch Center to version 7.3.1.5 or later and Lenovo Switch Center to version 8.1.2.0 or later to mitigate this vulnerability.
Other vulnerabilities in IBM System Networking Switch Center (SNSC) przed wersją 7.3.1.5, Lenovo Switch Center przed wersją 8.1.2.0
Original NVD description (English source)
Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files, via a request to port 40080 or 40443.