Design/Logic Flaw

2019-01-0714:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.0%

JSON

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

CPENameOperatorVersion
oncommand_unified_managerlt5.2.4

CPE	Name	Operator	Version
	oncommand_unified_manager	lt	5.2.4

References

security.netapp.com/advisory/ntap-20190104-0001/