CVEvulnerability
CVE-2016-5372
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
Affected configurations
• netapp snap creator framework (<= 4.3.0)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://kb.netapp.com/support/s/article/cve-2016-5372-cross-site-request-forgery-vulnerability-in-snap-creator-framework Vendor Advisory
- https://security.netapp.com/advisory/ntap-20160622-0001/ security.netapp.com
- https://kb.netapp.com/support/s/article/cve-2016-5372-cross-site-request-forgery-vulnerability-in-snap-creator-framework Vendor Advisory
- https://security.netapp.com/advisory/ntap-20160622-0001/ security.netapp.com