NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauthorized local attackers to execute arbitrary code.
[
{
"product": "OnCommand Unified Manager for Linux",
"vendor": "NetApp",
"versions": [
{
"status": "affected",
"version": "7.2 though 7.3"
}
]
}
]