CVE-2019-5495
Published May 10, 2019
Last updated 6 years ago
Overview
- Description
- OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
- Source
- security-alert@netapp.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-254
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "161304D1-A98E-49CE-99AB-F8203A7CDAE1",
"versionEndExcluding": "9.5"
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
"vulnerable": true,
"matchCriteriaId": "6AF6C63B-491D-4D3E-9E10-5B3DB45C8B04",
"versionEndExcluding": "9.5"
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "3C53CF9C-9767-4F2A-8F4F-8AE9117E0284",
"versionEndExcluding": "9.5"
}
],
"operator": "OR"
}
]
}
]