Skip to content
OpenAdvisories
Unscored CVE-2018-5482 EUVD-2018-17251GHSA-3jh6-397c-67wx

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmiss…

Published Mar 4, 2019 · Updated Sep 17, 2024 · Assigned by netapp

Vendor: NETAPP Product: SnapCenter Server

Description

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

Affected products

VendorProductAffectedFixed
NetApp SnapCenter Server Versions prior to 4.1 —

References