CVE-2019-5498

OnCommand Insight up to version 7.3.6 contains an information-disclosure vulnerability that could reveal sensitive account information to an authenticated user. This is documented across multiple sources (NVD and Red Hat/CVE entries) with the root cause described as an issue in how the product ha...

CVE-2019-5498: Undefined Security Weakness

OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user...

PT-2019-17715

Name of the Vulnerable Software and Affected Versions OnCommand Insight versions prior to 7.3.7 Description The issue may disclose sensitive account information to an authenticated user. Recommendations For versions prior to 7.3.7, update to version 7.3.7 or later to resolve the issue...

CVE-2019-5495

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5495

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5494

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5494

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 are affected by CVE-2019-5496 due to missing HTTP security headers, which could allow an attacker to obtain sensitive information via unspecified vectors. The connected NVD entry lists CVSS scores (2.0/3.0) indicating network access with no authentication...

CVE-2019-5496

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5495

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2019-5495

CVE-2019-5495 affects OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5. The issue is described as missing HTTP security headers, which could allow an attacker to obtain sensitive information via unspecified vectors. The NVD metrics indicate a 5.0 (Medium) base score, C...

CVE-2019-5494

The CVE-2019-5494 entry concerns OnCommand Unified Manager 7-Mode prior to version 5.2.4 that shipped without certain HTTP Security headers. The underlying issue is missing HTTP response security headers, enabling potential information disclosure through unspecified vectors. Affected product: Cis...

CVE-2019-5494

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...

PT-2019-17713

Name of the Vulnerable Software and Affected Versions Oncommand Insight versions prior to 7.3.5 Description The issue allows an attacker to obtain sensitive information via unspecified vectors due to the lack of certain HTTP Security headers. Recommendations For versions prior to 7.3.5, update to...

PT-2019-17711

Name of the Vulnerable Software and Affected Versions OnCommand Unified Manager 7-Mode versions prior to 5.2.4 Description The issue allows an attacker to obtain sensitive information via unspecified vectors due to the lack of certain HTTP Security headers. Recommendations For versions prior to...

CVE-2019-5494: Cleartext Transmission of Sensitive Information

OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...