Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-27312 EUVD-2023-31089GHSA-4p2x-j6f2-872j

Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere

Published Oct 12, 2023 · Updated Sep 17, 2024 · Assigned by netapp

Description

SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are
susceptible to a vulnerability which may allow authenticated
unprivileged users to modify email and snapshot name settings within the
VMware vSphere user interface.

Affected products

VendorProductAffectedFixed
NetApp SnapCenter Plugin for VMware vSphere 4.6 – < 4.9 4.9

References