{"id":"CVE-2019-5495","state":"PUBLISHED","title":"OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensit","description":"OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.","publishedAt":"2019-05-10T19:12:23.000Z","updatedAt":"2024-08-04T19:54:53.487Z","severity":null,"assigner":"netapp","products":["NetApp OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above"],"affected":[{"vendor":"NetApp","product":"OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above","versions":[{"version":"Versions prior to 9.5","status":"affected"}]}],"references":["https://security.netapp.com/advisory/ntap-20190509-0007/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:04.126Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/5xxx/CVE-2019-5495.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-5495","state":"PUBLISHED","datePublished":"2019-05-10T19:12:23.000Z","dateUpdated":"2024-08-04T19:54:53.487Z","assignerShortName":"netapp","assignerOrgId":"11fdca00-0482-4c88-a206-37f9c182c87d","dateReserved":"2019-01-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors."}],"affected":[{"vendor":"NetApp","product":"OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above","versions":[{"version":"Versions prior to 9.5","status":"affected"}]}],"references":[{"url":"https://security.netapp.com/advisory/ntap-20190509-0007/","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"netapp","dateUpdated":"2019-05-10T20:37:20.000Z","orgId":"11fdca00-0482-4c88-a206-37f9c182c87d"},"datePublic":"2019-05-09T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security-alert@netapp.com","ID":"CVE-2019-5495","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above","version":{"version_data":[{"version_value":"Versions prior to 9.5"}]}}]},"vendor_name":"NetApp"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://security.netapp.com/advisory/ntap-20190509-0007/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20190509-0007/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.netapp.com/advisory/ntap-20190509-0007/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:54:53.487Z"}}]}}}