VULNERABILITY INTELLIGENCE

CVE-2015-7817

CVSS score7.1 HIGH
EPSS probability1.41%
CISA KEVNot currently listed
Published2015-11-12
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:N/A:N

Description

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files, via a request to port 40080 or 40443.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references