Lucene search
HistoryFeb 10, 2009 - 10:30 p.m.
CVE-2008-4283
ibm
was
crlf injection
vulnerability
http headers
http response splitting
nvd
6.9 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
79.1%
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
Node
ibmwebsphere_application_serverRange≤5.1.1.19
ORibmwebsphere_application_serverMatch5.0
ORibmwebsphere_application_serverMatch5.0z_os
ORibmwebsphere_application_serverMatch5.0.0
ORibmwebsphere_application_serverMatch5.0.1
ORibmwebsphere_application_serverMatch5.0.2
ORibmwebsphere_application_serverMatch5.0.2.1
ORibmwebsphere_application_serverMatch5.0.2.2
ORibmwebsphere_application_serverMatch5.0.2.3
ORibmwebsphere_application_serverMatch5.0.2.4
ORibmwebsphere_application_serverMatch5.0.2.5
ORibmwebsphere_application_serverMatch5.0.2.6
ORibmwebsphere_application_serverMatch5.0.2.7
ORibmwebsphere_application_serverMatch5.0.2.8
ORibmwebsphere_application_serverMatch5.0.2.9
ORibmwebsphere_application_serverMatch5.0.2.10
ORibmwebsphere_application_serverMatch5.0.2.11
ORibmwebsphere_application_serverMatch5.0.2.12
ORibmwebsphere_application_serverMatch5.0.2.13
ORibmwebsphere_application_serverMatch5.0.2.14
ORibmwebsphere_application_serverMatch5.0.2.15
ORibmwebsphere_application_serverMatch5.0.2.16
ORibmwebsphere_application_serverMatch5.1.0
ORibmwebsphere_application_serverMatch5.1.0.2
ORibmwebsphere_application_serverMatch5.1.0.3
ORibmwebsphere_application_serverMatch5.1.0.4
ORibmwebsphere_application_serverMatch5.1.0.5
ORibmwebsphere_application_serverMatch5.1.1
ORibmwebsphere_application_serverMatch5.1.1.1
ORibmwebsphere_application_serverMatch5.1.1.2
ORibmwebsphere_application_serverMatch5.1.1.3
ORibmwebsphere_application_serverMatch5.1.1.4
ORibmwebsphere_application_serverMatch5.1.1.5
ORibmwebsphere_application_serverMatch5.1.1.6
ORibmwebsphere_application_serverMatch5.1.1.7
ORibmwebsphere_application_serverMatch5.1.1.8
ORibmwebsphere_application_serverMatch5.1.1.9
ORibmwebsphere_application_serverMatch5.1.1.10
ORibmwebsphere_application_serverMatch5.1.1.11
ORibmwebsphere_application_serverMatch5.1.1.12
ORibmwebsphere_application_serverMatch5.1.1.13
ORibmwebsphere_application_serverMatch5.1.1.14
ORibmwebsphere_application_serverMatch5.1.1.15
ORibmwebsphere_application_serverMatch5.1.1.16
ORibmwebsphere_application_serverMatch5.1.1.17
ORibmwebsphere_application_serverMatch5.1.1.18
Related
nvd
nvd
CVE-2008-4283
2009-02-10 22:30:00
prion
prion
Crlf injection
2009-02-10 22:30:00
cvelist
cvelist
CVE-2008-4283
2009-02-10 22:13:00
6.9 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.006 Low
EPSS
Percentile
79.1%
Related for CVE-2008-4283