Design/Logic Flaw

2019-05-1020:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
oncommand_insightlt7.3.5

CPE	Name	Operator	Version
	oncommand_insight	lt	7.3.5

References

security.netapp.com/advisory/ntap-20190509-0005/