CVE-2017-15516

High

Published: 16/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially leading to serious data security implications.

Recommendation

It is recommended to update the NetApp SnapCenter Server to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in NetApp SnapCenter Server

See all

CVE-2015-7887High
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
CVE-2016-1502High
NetApp SnapCenter Server versions 1.0 and 1.0P1 allow remote attackers to partially bypass authentication, enabling them to list and delete backups via unspecified vectors.

Original NVD description (English source)