What’s Vulnerable › Vulnerabilities

CVE-2018-5482

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-04 · updated 2026-06-17
• Weakness: CWE-311

Description

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

Affected products

• NetApp SnapCenter Server: before 4.1 — fixed in 4.1

How to fix

Upgrade to a fixed version: NetApp SnapCenter Server 4.1. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/107274
• https://security.netapp.com/advisory/ntap-20190304-0001/
• http://www.securityfocus.com/bid/107274
• https://security.netapp.com/advisory/ntap-20190304-0001/

Get alerted when CVE-2018-5482 or the next vulnerability affects your stack