medium6.5
CVE-2019-19000
For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response.
Impact
For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Esoms | from 4.0 through 6.0.3 |