Lucene search
IbmCVE-2014-3069HistoryAug 12, 2014 - 12:55 a.m.
CVE-2014-3069
2014-08-1200:55:03
ibm
web.nvd.nist.gov
21
cve
crlf injection
ibm
curam
spm
http headers
http response splitting
vulnerability
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
40.3%
Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters.
Affected configurations
Node
ibmcuram_social_program_managementMatch6.0.5.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | curam_social_program_management | 6.0.5.5 | cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:* |
Related
prion
prion
Crlf injection
2014-08-12 00:55:00
cvelist
cvelist
CVE-2014-3069
2014-08-12 00:00:00
ibm
ibm
nvd
nvd
CVE-2014-3069
2014-08-12 00:55:03
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
40.3%
Related for CVE-2014-3069