CVE-2015-3292 The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary co...
HighCVSS 10.0
EPSS 12.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp oncommand workflow automation | <= 2.2.1 | No fix listed |
| netapp oncommand workflow automation | = 3.0 | No fix listed |
References
- 74891 vdb-entry
- kb.netapp.com vendor-advisory