HTTP Security Header Vulnerability in OnCommand Workflow Automation by NetApp
CVE-2019-5503

5.3MEDIUM

Key Information:

Vendor

Netapp

Status
Oncommand Workflow Automation
Vendor
CVE Published:
10 September 2019

What is CVE-2019-5503?

OnCommand Workflow Automation, prior to version 5.0, is susceptible to vulnerabilities stemming from the absence of critical HTTP security headers. This oversight may allow malicious entities to exploit unspecified vectors to potentially access sensitive information, thus posing significant risks to user data integrity and confidentiality. It is imperative for users to upgrade to version 5.0 or later to protect against these vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

OnCommand Workflow Automation Versions prior to 5.0

References

https://security.netapp.com/advisory/ntap-20190909-0001/
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.