Unscored CVE-2019-5495 EUVD-2019-15070GHSA-h74h-p7p2-p27g

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which…

Published May 10, 2019 · Updated Aug 4, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above Platform: Linux Platform: Windows Category: Virtualization

Description

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NetApp	OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above	Versions prior to 9.5	—

References

https://security.netapp.com/advisory/ntap-20190509-0007/