CVE-2019-17275

OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers

published February 26, 2020

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

🚨 A crafty little flaw in OnCommand Cloud Manager lets remote attackers execute arbitrary code if you're running a version before 3.8.0! Think of it like a restaurant kitchen where anyone can walk in and start using the chef's knives without permission — that’s a recipe for disaster! If exploited, this vulnerability could allow an attacker to run malicious commands on your system, potentially leading to data theft, service disruption, or worse. The implications of unauthorized access can escalate quickly, affecting not just your data, but your entire operation!

Put simply

Think of it like a restaurant kitchen where anyone can walk in and start using the chef's knives without permission — that’s a recipe for disaster! This vulnerability in OnCommand Cloud Manager lacks adequate controls, allowing remote attackers to execute arbitrary code without proper authentication or authorization checks.

What to do

If exploited, this vulnerability could allow an attacker to run malicious commands on your system, potentially leading to data theft, service disruption, or worse. The implications of unauthorized access can escalate quickly, affecting not just your data, but your entire operation! To protect yourself, upgrade to OnCommand Cloud Manager version 3.8.0 or later without delay. It’s also wise to review your security settings and implement additional access controls. Don’t wait until it’s too late! You've got this! Follow these steps, and soon you'll be fortified against potential threats! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02817 · 86.5th percentile
Published
2020-02-26T17:44Z
EPSS history
Timeline
  • 26 FEB 17:44Z
    OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers
    cvelistv5