CVE-2017-14053: Infoleak
NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14053?
CVE-2017-14053 is considered a medium-severity vulnerability due to the potential for cookie interception in HTTP sessions.
What systems are affected by CVE-2017-14053?
CVE-2017-14053 affects NetApp OnCommand Unified Manager for Clustered Data ONTAP versions before 7.2P1.
How do I fix CVE-2017-14053?
To fix CVE-2017-14053, upgrade NetApp OnCommand Unified Manager for Clustered Data ONTAP to version 7.2P1 or later.
What is the impact of CVE-2017-14053 on my system?
The impact of CVE-2017-14053 includes the risk of remote attackers being able to capture sensitive cookie information during transmission.
Is there a workaround for CVE-2017-14053?
There are no specific workarounds for CVE-2017-14053; the recommended action is to apply the latest update to mitigate the vulnerability.