OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a vulnerability that could allow HTTP clients to cache sensitive responses making them accessible to an attacker who has access to the system where the client runs.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Oncommand_system_manager | Netapp | 9.0 (including) | 9.3 (excluding) |
| Oncommand_system_manager | Netapp | 9.3 (including) | 9.3 (including) |
| Oncommand_system_manager | Netapp | 9.4 (including) | 9.4 (including) |