SnapCenter versions prior to 4.7 Vulnerability: Missing Content Security Policy (CSP) Implementation

SnapCenter versions prior to 4.7 Vulnerability: Missing Content Security Policy (CSP) Implementation

CVE-2022-38732 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

Learn more about our Web Application Penetration Testing UK.