PT-2019-10985

Name of the Vulnerable Software and Affected Versions: OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.4 Description: The issue allows for impersonation via man-in-the-middle MITM attacks due to the lack of the secure attribute in cookies under certain circumstances...

CVE-2018-5481: Missing Encryption of Sensitive Data

OnCommand Unified Manager for 7-Mode core package prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle MITM attacks...

PT-2018-8408

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 Description The issue may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user...

CVE-2017-7568: Exposure of Sensitive Information to an Unauthorized Actor

NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface...

CVE-2017-11461: Improper Input Validation

NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface...

PT-2017-12030

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for 7-mode core package versions prior to 5.2.1 Description The issue allows for a clickjacking or "UI redress attack" that could cause a user to perform an unintended action in the user interface...