Vulnerability Description
Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netapp | Active Iq Unified Manager | < 9.6 |
References
- https://security.netapp.com/advisory/ntap-20200803-0001/Vendor Advisory
- https://security.netapp.com/advisory/ntap-20200803-0001/Vendor Advisory
FAQ
What is CVE-2020-8574?
CVE-2020-8574 is a vulnerability with a CVSS score of 7.8 (HIGH). Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users...
How severe is CVE-2020-8574?
CVE-2020-8574 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8574?
Check the references section above for vendor advisories and patch information. Affected products include: Netapp Active Iq Unified Manager.