Lucene search

[email protected]CVE-2018-5481

HistoryJan 07, 2019 - 3:00 p.m.

CVE-2018-5481

2019-01-0715:00:00

CWE-311

[email protected]

web.nvd.nist.gov

cve-2018-5481

oncommand unified manager

7-mode

core package

security risk

vulnerability

mitm attack

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

Affected configurations

NVD

Node

netapponcommand_unified_managerRange<5.2.4

CPENameOperatorVersion
netapp:oncommand_unified_managernetapp oncommand unified managerlt5.2.4

CPE	Name	Operator	Version
netapp:oncommand_unified_manager	netapp oncommand unified manager	lt	5.2.4

CNA Affected

[
  {
    "product": "OnCommand Unified Manager for 7-Mode (core package)",
    "vendor": "NetApp",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 5.2.4"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20190104-0001/

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

Related for CVE-2018-5481

nvd1 prion1 cvelist1