Skip to content
OpenAdvisories
Critical WID-SEC-2023-1060 1 CVE

NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service

Published Apr 20, 2023 · Updated May 25, 2023 · Revision 2 · de-DE

Vendor: IBM Vendor: NETAPP Product: ActiveIQ Unified Manager Product: ActiveIQ Unified Manager Linux Product: ActiveIQ Unified Manager VMware vSphere Product: ActiveIQ Unified Manager Windows Product: FileNet Content Manager 3.0.7 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Dateien zu manipulieren.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 1

  • Critical 9.8
    CVE-2016-1000027 Public exploit EPSS 33%

    Pivotal Spring Framework contains unsafe Java deserialization methods

    Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authenticatio…

    libspring-java org.springframework:spring-web Debian Maven

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References