CVE-2015-3292

High

Published: 31/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The installer in NetApp OnCommand Workflow Automation before version 2.2.1P1 and 3.x before version 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, allowing remote attackers to execute arbitrary code via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability and to block access to JDWP from untrusted sources.

Other vulnerabilities in NetApp OnCommand Workflow Automation

CVE-2016-1894High
NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.

Original NVD description (English source)

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.