CVE-2019-5496

CWE-319 — Cleartext Transmission3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 57.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp Oncommand Insight
Timeline
PublishedMay 10
Latest updateMay 24

Description

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netapp/oncommand_insightVersions prior to 7.3.5

🔴Vulnerability Details

2
GHSA
GHSA-cv4w-f45p-g3fw: Oncommand Insight versions prior to 7↗2022-05-24
▶
CVEList
CVE-2019-5496: Oncommand Insight versions prior to 7↗2019-05-10
▶
CVE-2019-5496 (HIGH CVSS 7.5) | Oncommand Insight versions prior to | cvebase.io