HTTP Security Header Vulnerability in OnCommand Workflow Automation by NetApp

CVE-2019-5503

Summary

OnCommand Workflow Automation, prior to version 5.0, is susceptible to vulnerabilities stemming from the absence of critical HTTP security headers. This oversight may allow malicious entities to exploit unspecified vectors to potentially access sensitive information, thus posing significant risks to user data integrity and confidentiality. It is imperative for users to upgrade to version 5.0 or later to protect against these vulnerabilities.

References