Skip to content
fr Sign in
Not rated

CVE-2018-5482 NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which…

Description

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

Affected products and versions

Product Affected versions Fixed in
SnapCenter Server Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SnapCenter Server

The 3 CVEs of SnapCenter Server →
CVE-2017-15515 NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged… Not rated CVE-2017-15516 NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability… Not rated
Track this CVE