← Back

CVE-2018-5488

nvd nist
Published: Jun 13, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.

Affected (2)

Netapp
2 products
Santricity Storage Manager
Santricity Web Services Proxy
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Santricity Storage Manager
From 11.30.0x00.0004 to 11.42.0x00.0001
Santricity Web Services Proxy
From 1.10.x000.0002 to 2.12.x000.0002

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: security-alert@netapp.com
Third Party AdvisoryVDB Entry
Source: security-alert@netapp.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.