Lucene search
HistoryDec 05, 2012 - 5:55 p.m.
CVE-2011-2732
cve-2011-2732
crlf injection
vmware
springsource
spring security
http header injection
response splitting
vulnerability
7 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.2%
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
Related
packetstorm
packetstorm
Spring Security Header Injection
2011-09-09 00:00:00
securityvulns
securityvulns
CVE-2011-2732: Spring Security header injection vulnerability
2011-09-13 00:00:00
osv
osv
Improper Control of Generation of Code in Spring Security
2022-05-17 05:18:15
github
github
Improper Control of Generation of Code in Spring Security
2022-05-17 05:18:15
prion
prion
Crlf injection
2012-12-05 17:55:00
ubuntucve
ubuntucve
CVE-2011-2732
2012-12-05 00:00:00
7 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.2%
Related for CVE-2011-2732