High severity7.5NVD Advisory· Published Sep 1, 2017· Updated May 13, 2026
CVE-2017-14053
CVE-2017-14053
Description
NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
Affected products
1- cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:*:*:*:*:*:*:*:*Range: <=7.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- kb.netapp.com/support/s/article/NTAP-20170831-0001nvdVendor Advisory
News mentions
0No linked articles in our index yet.