CVE-2017-11461

NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface.

Score

CVSS 3.0 4.3 Medium

Status

Modified - security-alert@netapp.com

Published

2017-11-10

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Oncommand Unified Manager (Netapp)

References

• http://www.securityfocus.com/bid/101778
• https://security.netapp.com/advisory/ntap-20171107-0001/