Unscored CVE-2018-5486 EUVD-2018-17255GHSA-8657-j78q-jmw2

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unaut…

Published Apr 25, 2018 · Updated Sep 16, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Unified Manager for Linux Platform: Linux

Description

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local attackers to execute arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
NetApp	OnCommand Unified Manager for Linux	7.2 though 7.3	—

References

https://security.netapp.com/advisory/ntap-20180425-0001/