Unscored CVE-2019-5503 EUVD-2019-15078GHSA-hppf-pw38-q72w

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker …

Published Sep 10, 2019 · Updated Aug 4, 2024 · Assigned by netapp

Vendor: NETAPP Product: OnCommand Workflow Automation

Description

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
NetApp	OnCommand Workflow Automation	Versions prior to 5.0	—

References

https://security.netapp.com/advisory/ntap-20190909-0001/