CVE-2018-5488
Last modified
CVE-2018-5488 is a vulnerability of currently unknown severity. NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.. EPSS estimates a 3.97% chance of exploitation in the next 30 days.
Description
NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 11.42.0X00.0001 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netapp | Santricity Storage Manager | >= 11.30.0x00.0004, <= 11.42.0x00.0001 |
| Netapp | Santricity Web Services Proxy | >= 1.10.x000.0002, <= 2.12.x000.0002 |
References
- http://www.securityfocus.com/bid/104462Third Party Advisory, VDB Entry
- https://security.netapp.com/advisory/ntap-20180612-0001/Vendor Advisory
- http://www.securityfocus.com/bid/104462Third Party Advisory, VDB Entry
- https://security.netapp.com/advisory/ntap-20180612-0001/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-5488?
How severe is CVE-2018-5488?
How do I fix CVE-2018-5488?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-5482NetApp SnapCenter Server prior to 4.1 does not set the secur…
- CVE-2018-5483Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-5484Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-5485NetApp OnCommand Unified Manager for Windows versions 7.2 th…
- CVE-2018-5486NetApp OnCommand Unified Manager for Linux versions 7.2 thou…
- CVE-2018-5487NetApp OnCommand Unified Manager for Linux versions 7.2 thro…
- CVE-2018-5489NetApp 7-Mode Transition Tool allows users with valid creden…
- CVE-2018-5490Read-Only export policy rules are not correctly enforced in …
- CVE-2018-5491Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-5492NetApp E-Series SANtricity OS Controller Software 11.30 and …
- CVE-2018-5493ATTO FibreBridge 7500N firmware versions prior to 2.90 are s…7.5
- CVE-2018-5494Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2018-5488?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
