CVE-2019-5496

Description

Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

• NETAPP / OnCommand InsightVersions prior to 7.3.5 – Versions prior to 7.3.5

References

• MISChttps://security.netapp.com/advisory/ntap-20190509-0005/