Lucene search
HistoryMay 03, 2012 - 10:11 a.m.
CVE-2011-4237
crlf injection
cisco
ciscoworks
common services 4.0
autologin.jsp
http headers
http response splitting
bug id csctu18693
cve-2011-4237
nvd
7.2 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.7%
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Affected configurations
Node
ciscociscoworks_common_servicesMatch4.0
ORciscoprime_lan_management_solutionMatch4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:ciscoworks_common_services | cisco ciscoworks common services | eq | 4.0 |
Related
prion
prion
Crlf injection
2012-05-03 10:11:00
cisco
cisco
nvd
nvd
CVE-2011-4237
2012-05-03 10:11:39
nessus
nessus
CiscoWorks Common Services HTTP Response Splitting
2012-05-01 00:00:00
cvelist
cvelist
CVE-2011-4237
2012-05-03 10:00:00
7.2 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.7%
Related for CVE-2011-4237