Lucene search
HistoryMay 31, 2015 - 5:59 p.m.
CVE-2015-3292
netapp
oncommand
workflow automation
installer
jdwp
cve-2015-3292
nvd
security vulnerability
remote code execution
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.3 Low
EPSS
Percentile
97.0%
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
Node
netapponcommand_workflow_automationRange≤2.2.1
ORnetapponcommand_workflow_automationMatch3.0
Related
nvd
nvd
CVE-2015-3292
2015-05-31 17:59:04
prion
prion
Code injection
2015-05-31 17:59:00
cvelist
cvelist
CVE-2015-3292
2015-05-31 17:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.3 Low
EPSS
Percentile
97.0%
Related for CVE-2015-3292