NVD

Id
25167  
Name
CVE-2015-3292  
Description
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-05-31  
Modified Date
2016-12-02  
Seq
2015-3292  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133115 25167 CVE-2015-3292 74891  View
133116 25167 CVE-2015-3292 https://kb.netapp.com/support/index?page=content&id=9010037  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7566 JVNDB-2015-002886 NetApp OnCommand Workflow Automation のインストーラにおける任意のコードを実行される脆弱性 NetApp OnCommand Workflow Automation のインストーラは、Java Debugging Wire Protocol (JDWP) サービスを設定するため、任意のコードを実行される脆弱性が存在します。 CVE-2015-3292 80517 CVE-2015-3292 25167 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002886.html 2015-05-28 2015-06-03 View