Impersonation Vulnerability in OnCommand Unified Manager by NetApp

CVE-2018-5481

What is CVE-2018-5481?

The OnCommand Unified Manager for 7-Mode, specifically the core package versions prior to 5.2.4, suffers from a vulnerability where cookies lack the secure attribute in certain scenarios. This oversight allows attackers to potentially exploit the system through man-in-the-middle (MITM) attacks, enabling impersonation of legitimate users. It is crucial for users and administrators to understand the implications of this vulnerability and take necessary steps to mitigate risks by applying appropriate updates and configurations.

References