NetApp OnCommand Unified Manager for Clustered Data ONTAP prior to 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote malicious users to capture this cookie by intercepting its transmission within an HTTP session.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
netapp oncommand unified manager for clustered data ontap |