CVE-2018-5482 NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
MediumCVSS 5.3
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp snapcenter server | < 4.1 | 4.1 |
| netapp snapcenter server | = Versions prior to 4.1 | No fix listed |
References
- 107274 third-party-advisory vdb-entry
- security.netapp.com patch vendor-advisory