Unscored CVE-2019-5496 EUVD-2019-15071GHSA-cv4w-f45p-g3fw

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain …

Published May 10, 2019 · Updated Aug 4, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Insight

Description

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NetApp	OnCommand Insight	Versions prior to 7.3.5	—

References

https://security.netapp.com/advisory/ntap-20190509-0005/