Missing HTTP Security Headers in OnCommand Unified Manager for VMware vSphere, Linux, and Windows prior to 9.5

CVE-2019-5495 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.