CVE-2023-27312 — Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere

CVE-2023-27312

Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere PUBLISHED

Description (CNA)

SnapCenter Plugin for VMware vSphere versions 4.6 prior to 4.9 are susceptible to a vulnerability which may allow authenticated unprivileged users to modify email and snapshot name settings within the VMware vSphere user interface.

Affected (CNA)

Vendor / product	Versions
NetApp / SnapCenter Plugin for VMware vSphere	affected 4.6 before 4.9

CWE

CWE-250

References

https://security.netapp.com/advisory/ntap-20230713-0001/

ADP enrichment

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20230713-0001/

CISA-ADP

No English description supplied.

No references supplied.