Read the docs

Snapweb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Snapweb records in CISA KEV

No Snapweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2016-01447 CVE-2016-1587 · GHSA-7xcr-378w-qqg3

Improper access control in Ubuntu snapweb

Priority LOW 35

The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01102 Published 2019-04-22 Fixed in 0.21.2 CWE-284
Open these records in search →