Crlf injection

2007-03-2223:19:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.

CPENameOperatorVersion
websphere_application_serverle6.0.2.15

CPE	Name	Operator	Version
	websphere_application_server	le	6.0.2.15

References

osvdb.org/34484

secunia.com/advisories/24552

www-1.ibm.com/support/docview.wss?uid=swg1PK39732

www.securityfocus.com/bid/23086

www.securitytracker.com/id?1017806

www.vupen.com/english/advisories/2007/1062

exchange.xforce.ibmcloud.com/vulnerabilities/33123