Lucene search
PRIOn knowledge basePRION:CVE-2017-5868HistoryMay 26, 2017 - 1:29 a.m.
Crlf injection
2017-05-2601:29:00
PRIOn knowledge base
www.prio-n.com
3
CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via “%0A” characters in the PATH_INFO to session_start/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openvpn_access_server | eq | 2.1.4 |
Related
packetstorm
packetstorm
OpenVPN Access Server 2.1.4 CRLF Injection
2017-05-27 00:00:00
nvd
nvd
CVE-2017-5868
2017-05-26 01:29:00
cve
cve
CVE-2017-5868
2017-05-26 01:29:00
hackerone
hackerone
Ubiquiti Inc.: CRLF Injection on openvpn.svc.ubnt.com
2017-05-26 22:41:44
Cuvva: CRLF Injection [vpn.corp.cuvva.com]
2017-05-24 18:16:45
seebug
seebug
OpenVPN Access Server : CRLF injection with Session fixation(CVE-2017-5868)
2017-05-27 00:00:00
cvelist
cvelist
CVE-2017-5868
2017-05-25 19:00:00