CVE-2018-5481

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

Score

CVSS 3.0 7.4 High

Status

Modified - security-alert@netapp.com

Published

2019-01-07

Last modified

2024-08-05

Weaknesses

CWE-311

Affected products

• Oncommand Unified Manager (Netapp)
• Oncommand Unified Manager For 7-mode Core Package (Netapp)

References

• https://security.netapp.com/advisory/ntap-20190104-0001/