CVE-2018-5481: High severity netapp oncommand unified manager for windows vulnerability
OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5481?
CVE-2018-5481 is a vulnerability in OnCommand Unified Manager for 7-Mode (core package) prior to version 5.2.4 that allows for impersonation via man-in-the-middle (MITM) attacks.
Who is affected by CVE-2018-5481?
Users of OnCommand Unified Manager for 7-Mode (core package) prior to version 5.2.4 are affected by CVE-2018-5481.
How severe is CVE-2018-5481?
CVE-2018-5481 has a severity rating of 7.4 (high).
How can I fix CVE-2018-5481?
To fix CVE-2018-5481, upgrade to version 5.2.4 or a later version of OnCommand Unified Manager for 7-Mode (core package).
Are there any additional resources about CVE-2018-5481?
Yes, you can find more information about CVE-2018-5481 at the following reference: [Netapp Security Advisory](https://security.netapp.com/advisory/ntap-20190104-0001/)