CVEvulnerability

CVE-2015-7820

7.1 HIGH Published 2015-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-362

Description

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.

Affected configurations

• lenovo switch center (<= 8.1.1.0) • ibm system networking switch center (<= 7.3.1.4)

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References