CVE-2019-5495

CWE-2543 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 47.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp Oncommand Unified Manager
Timeline
PublishedMay 10
Latest updateMay 24

Description

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-h74h-p7p2-p27g: OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9↗2022-05-24
▶
CVEList
CVE-2019-5495: OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9↗2019-05-10
▶