Lucene search
IbmCVE-2015-2028HistoryOct 04, 2015 - 2:59 a.m.
CVE-2015-2028
2015-10-0402:59:12
ibm
web.nvd.nist.gov
20
cve-2015-2028
crlf injection
ibm websphere
extreme scale
http headers
http response splitting
remote attackers
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
56.6%
CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
Affected configurations
Node
ibmwebsphere_extreme_scaleMatch7.1.0
ORibmwebsphere_extreme_scaleMatch7.1.0.2
ORibmwebsphere_extreme_scaleMatch7.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_extreme_scale | 7.1.0 | cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:*:*:*:*:*:*:* |
| ibm | websphere_extreme_scale | 7.1.0.2 | cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0.2:*:*:*:*:*:*:* |
| ibm | websphere_extreme_scale | 7.1.1 | cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:*:*:*:*:*:*:* |
Related
prion
prion
Crlf injection
2015-10-04 02:59:00
cvelist
cvelist
CVE-2015-2028
2015-10-04 01:00:00
nvd
nvd
CVE-2015-2028
2015-10-04 02:59:12
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
56.6%
Related for CVE-2015-2028