CVE-2019-5503: Medium severity netapp oncommand workflow automation vulnerability
Published Sep 10, 2019
·Updated
OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
Affected Software
1 affected component
NetApp OnCommand Workflow Automation=5.0
Event History
Sep 10, 2019
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5503?
CVE-2019-5503 has a medium severity rating due to the risk of exposing sensitive information.
2
How can I fix CVE-2019-5503?
To fix CVE-2019-5503, upgrade OnCommand Workflow Automation to version 5.0 or later where the HTTP Security headers are properly configured.
3
What versions of OnCommand Workflow Automation are affected by CVE-2019-5503?
CVE-2019-5503 affects all versions of OnCommand Workflow Automation prior to 5.0.
4
What kind of vulnerabilities does CVE-2019-5503 expose?
CVE-2019-5503 exposes vulnerabilities related to the lack of certain HTTP Security headers which can lead to sensitive data exposure.
5
Are there any workarounds for CVE-2019-5503?
There are no known effective workarounds for CVE-2019-5503; upgrading to the latest version is recommended.