Design/Logic Flaw

2017-09-0121:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON

NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.

CPENameOperatorVersion
oncommand_unified_manager_for_clustered_data_ontaple7.2

CPE	Name	Operator	Version
	oncommand_unified_manager_for_clustered_data_ontap	le	7.2

References

kb.netapp.com/support/s/article/NTAP-20170831-0001