Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users.
[
{
"product": "Active IQ Unified Manager for Linux 7.3 and above",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Versions through 9.6"
}
]
}
]