CVE-2016-1502
HighSummary
NetApp SnapCenter Server versions 1.0 and 1.0P1 allow remote attackers to partially bypass authentication, enabling them to list and delete backups via unspecified vectors.
Risk Assessment
Attackers may gain access to sensitive backup data, potentially leading to data loss and compromise of system integrity.
Recommendation
It is recommended to upgrade to the latest version of SnapCenter Server and implement additional security measures to protect against unauthorized access.
Other vulnerabilities in NetApp SnapCenter Server
See all- CVE-2017-15516High
NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.
- CVE-2015-7887High
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
Original NVD description (English source)
NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.