CVE-2023-27316
Assigner: netapp
Published: 2023-10-12T21:04:47.473Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SnapCenter
vendor: NetApp
versions: lessThanOrEqual: 4.9
status: affected
version: 4.8
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: SnapCenter versions 4.8 through 4.9 are susceptible to a 
vulnerability which may allow an authenticated SnapCenter Server user to
 become an admin user on a remote system where a SnapCenter plug-in has 
been installed. 


value: SnapCenter versions 4.8 through 4.9 are susceptible to a 
vulnerability which may allow an authenticated SnapCenter Server user to
 become an admin user on a remote system where a SnapCenter plug-in has 
been installed. 


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-269
description: CWE-269 Improper Privilege Management
type: CWE
source: advisory: NTAP-20231012-0001
discovery: UNKNOWN
title: Privilege Escalation Vulnerability in SnapCenter
x_generator: engine: Vulnogram 0.1.0-dev