Remote code execution

2021-03-1522:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.5%

JSON

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.

CPENameOperatorVersion
management_services_for_element_software_and_netapp_hcilt2.17.56
solidfire_\\&_hci_management_nodele12.2
spring_bootlt1.3.2

Name	Operator	Version
management_services_for_element_software_and_netapp_hci	lt	2.17.56
solidfire_\\&_hci_management_node	le	12.2
spring_boot	lt	1.3.2

References

security.netapp.com/advisory/ntap-20210315-0001/