CVE-2017-11461: Input Validation
NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11461?
CVE-2017-11461 has a high severity rating due to the potential for exploitation through clickjacking attacks.
How do I fix CVE-2017-11461?
To mitigate CVE-2017-11461, upgrade NetApp OnCommand Unified Manager to version 5.2.1 or later.
What type of attack does CVE-2017-11461 involve?
CVE-2017-11461 involves a clickjacking or user interface redress attack that can mislead users into performing unintended actions.
Which versions of NetApp OnCommand Unified Manager are affected by CVE-2017-11461?
CVE-2017-11461 affects all versions of NetApp OnCommand Unified Manager prior to 5.2.1.
Is there a workaround for CVE-2017-11461?
There are no documented workarounds for CVE-2017-11461; upgrading to the latest version is the recommended action.