CVE-2018-5482

State: Published
Severity: Not scored
Published: Mar 4, 2019
Updated: Sep 17, 2024
Reserved: Jan 12, 2018

Description

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SnapCenter ServerNetApp	Versions prior to 4.1Affected

References

107274vdb-entry
https://security.netapp.com/advisory/ntap-20190304-0001/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.