PT-2017-12548 · Netapp · Netapp Storagegrid Webscale

Publicado 2017-08-29 · Atualizado 2019-10-03 · CVE-2017-12422

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NetApp StorageGRID Webscale versions 10.2.x through 10.2.2.2 NetApp StorageGRID Webscale versions 10.3.x through 10.3.0.3 NetApp StorageGRID Webscale versions 10.4.x through 10.4.0.1

Description The issue allows remote authenticated users to delete arbitrary objects.

Recommendations For versions 10.2.x through 10.2.2.2, update to version 10.2.2.3 or later. For versions 10.3.x through 10.3.0.3, update to version 10.3.0.4 or later. For versions 10.4.x through 10.4.0.1, update to version 10.4.0.2 or later.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-12422

Produtos afetados

Netapp Storagegrid Webscale

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-12422 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12422 · Nota de Segurança
• https://kb.netapp.com/support/s/article/NTAP-20170825-0001 · Aviso do Fabricante
• http://securityfocus.com/bid/100535 · Nota