CVE-2018-5487

NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security-alert@netapp.com

Published

2018-05-24

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Oncommand Unified Manager (Netapp)
• Oncommand Unified Manager For Linux (Netapp)

References

• https://security.netapp.com/advisory/ntap-20180523-0001/