Cross site request forgery (csrf)

2017-11-1622:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.

CPENameOperatorVersion
snapcenter_servereq1.1
snapcenter_servereq2.0

CPE	Name	Operator	Version
	snapcenter_server	eq	1.1
	snapcenter_server	eq	2.0

References

security.netapp.com/advisory/ntap-20171114-0001/