CVE-2015-7887
HighSummary
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
Risk Assessment
The ability for unauthorized users to delete backups may lead to data loss and disruption of business processes.
Recommendation
It is recommended to restrict access to backup management functions to trusted users only and to monitor user activity.
Other vulnerabilities in NetApp SnapCenter Server 1.0
See all- CVE-2017-15516High
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.
- CVE-2016-1502High
NetApp SnapCenter Server versions 1.0 and 1.0P1 allow remote attackers to partially bypass authentication, enabling them to list and delete backups via unspecified vectors.
Original NVD description (English source)
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.