Unscored CVE-2019-5494 EUVD-2019-15069GHSA-8mg8-7wvf-hrwj

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attac…

Published May 10, 2019 · Updated Aug 4, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Unified Manager 7-Mode

Description

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NetApp	OnCommand Unified Manager 7-Mode	Versions prior to 5.2.3	—

References

https://security.netapp.com/advisory/ntap-20190509-0006/