CVE-2015-7820

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0…

published November 12, 2015

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01413 · 72.5th percentile
Published
2015-11-12T02:00Z
EPSS history
Timeline
  • 12 NOV 02:00Z
    Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0…
    cvelistv5