CVEvulnerability

CVE-2020-8574

7.8 HIGH Published 2020-08-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users.

Affected configurations

• netapp active iq unified manager (< 9.6)

References