CVE-2018-5489

{"id": "CVE-2018-5489", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2018-08-03T13:29:00.363", "references": [{"url": "https://security.netapp.com/advisory/ntap-20150323-0001/", "tags": ["Vendor Advisory"], "source": "security-alert@netapp.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged users. 7MTT versions below 2.0 do not enforce user authorization rules on file information and status that it has previously collected. The released version of 7MTT has been updated to maintain and verify authorization rules for file information, status and utilities."}, {"lang": "es", "value": "NetApp 7-Mode Transition Tool permite que usuarios con credenciales v\u00e1lidas accedan a funciones e informaci\u00f3n que deber\u00eda hacer estado restringida a administradores o usuarios privilegiados. 7MTT en versiones anteriores a la 2.0 no aplica las reglas de autorizaci\u00f3n de usuarios sobre la informaci\u00f3n y el estado de archivos que se han recopilado anteriormente. La versi\u00f3n lanzada de 7MTT se ha actualizado para mantener y actualizar las reglas de autorizaci\u00f3n para la informaci\u00f3n, estado y utilidades de los archivos."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netapp:7-mode_transition_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E6294DF-FA4B-4F8E-9C04-BC49485711B7", "versionEndExcluding": "2.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@netapp.com"}