Missing HTTP Security Headers in OnCommand Workflow Automation Versions Prior to 5.0

Missing HTTP Security Headers in OnCommand Workflow Automation Versions Prior to 5.0

CVE-2019-5503 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.