Lucene search
HistoryMay 26, 2014 - 11:14 a.m.
CVE-2012-3333
cve-2012-3333
crlf injection
ibm maximo
asset management
http headers
http response splitting
remote attackers
vulnerability
6.9 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.5%
CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.
Affected configurations
Node
ibmsmartcloud_control_deskMatch7.0
ORibmsmartcloud_control_deskMatch7.5
ORibmsmartcloud_control_deskMatch7.5.0.0
ORibmsmartcloud_control_deskMatch7.5.0.1
ORibmsmartcloud_control_deskMatch7.5.0.2
ORibmsmartcloud_control_deskMatch7.5.1.0
ORibmsmartcloud_control_deskMatch7.5.1.1
Node
ibmmaximo_asset_managementMatch7.1
ORibmmaximo_asset_managementMatch7.1.1
ORibmmaximo_asset_managementMatch7.1.1.1
ORibmmaximo_asset_managementMatch7.1.1.2
ORibmmaximo_asset_managementMatch7.1.1.5
ORibmmaximo_asset_managementMatch7.1.1.6
ORibmmaximo_asset_managementMatch7.1.1.7
ORibmmaximo_asset_managementMatch7.1.1.8
ORibmmaximo_asset_managementMatch7.1.1.9
ORibmmaximo_asset_managementMatch7.1.1.10
ORibmmaximo_asset_managementMatch7.1.1.11
ORibmmaximo_asset_managementMatch7.1.1.12
ORibmmaximo_asset_managementMatch7.1.2
ORibmmaximo_asset_managementMatch7.5.0.0
ORibmmaximo_asset_managementMatch7.5.0.1
ORibmmaximo_asset_managementMatch7.5.0.2
ORibmmaximo_asset_managementMatch7.5.0.3
ORibmmaximo_asset_managementMatch7.5.0.4
ORibmmaximo_asset_managementMatch7.5.0.5
Related
prion
prion
Crlf injection
2014-05-26 11:14:00
nvd
nvd
CVE-2012-3333
2014-05-26 11:14:51
cvelist
cvelist
CVE-2012-3333
2014-05-26 10:00:00
ibm
ibm
6.9 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.5%
Related for CVE-2012-3333