Skip to content
Sign in
6.5 Medium

CVE-2019-19000 For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the…

Description

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information.

Affected products and versions

Product Affected versions Fixed in
eSOMS 6.0.3 No fix stated
eSOMS 5 No fix stated
eSOMS 4 No fix stated

Other CVEs of eSOMS

The 13 CVEs of eSOMS →
CVE-2019-19002 For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web… 6.3 Medium CVE-2019-19001 For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response 6.5 Medium CVE-2019-19097 ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers 5.9 Medium CVE-2019-19096 The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text 6.1 Medium
Track this CVE