CVE-2020-8587

OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security-alert@netapp.com

Published

2021-02-08

Last modified

2024-08-04

Affected products

• Oncommand System Manager (Netapp)

References

• https://security.netapp.com/advisory/NTAP-20210208-0001/