CVEvulnerability

CVE-2018-5489

6.5 MEDIUM Published 2018-08-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-863

Description

NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged users. 7MTT versions below 2.0 do not enforce user authorization rules on file information and status that it has previously collected. The released version of 7MTT has been updated to maintain and verify authorization rules for file information, status and utilities.

Affected configurations

• netapp 7-mode transition tool (< 2.0)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References