Skip to content
OpenAdvisories
Unscored CVE-2018-5481 EUVD-2018-17250GHSA-4vm6-24h2-hx93

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances mak…

Published Jan 7, 2019 · Updated Aug 5, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Unified Manager for 7-Mode (core package)

Description

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

Affected products

VendorProductAffectedFixed
NetApp OnCommand Unified Manager for 7-Mode (core package) Versions prior to 5.2.4 —

References