Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-4283
HistoryFeb 10, 2009 - 10:30 p.m.

CVE-2008-4283

2009-02-1022:30:00
CWE-20
[email protected]
web.nvd.nist.gov
3

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

79.1%

JSON

CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected configurations

Nvd
Node
ibmwebsphere_application_serverRange≤5.1.1.19
OR
ibmwebsphere_application_serverMatch5.0
OR
ibmwebsphere_application_serverMatch5.0z_os
OR
ibmwebsphere_application_serverMatch5.0.0
OR
ibmwebsphere_application_serverMatch5.0.1
OR
ibmwebsphere_application_serverMatch5.0.2
OR
ibmwebsphere_application_serverMatch5.0.2.1
OR
ibmwebsphere_application_serverMatch5.0.2.2
OR
ibmwebsphere_application_serverMatch5.0.2.3
OR
ibmwebsphere_application_serverMatch5.0.2.4
OR
ibmwebsphere_application_serverMatch5.0.2.5
OR
ibmwebsphere_application_serverMatch5.0.2.6
OR
ibmwebsphere_application_serverMatch5.0.2.7
OR
ibmwebsphere_application_serverMatch5.0.2.8
OR
ibmwebsphere_application_serverMatch5.0.2.9
OR
ibmwebsphere_application_serverMatch5.0.2.10
OR
ibmwebsphere_application_serverMatch5.0.2.11
OR
ibmwebsphere_application_serverMatch5.0.2.12
OR
ibmwebsphere_application_serverMatch5.0.2.13
OR
ibmwebsphere_application_serverMatch5.0.2.14
OR
ibmwebsphere_application_serverMatch5.0.2.15
OR
ibmwebsphere_application_serverMatch5.0.2.16
OR
ibmwebsphere_application_serverMatch5.1.0
OR
ibmwebsphere_application_serverMatch5.1.0.2
OR
ibmwebsphere_application_serverMatch5.1.0.3
OR
ibmwebsphere_application_serverMatch5.1.0.4
OR
ibmwebsphere_application_serverMatch5.1.0.5
OR
ibmwebsphere_application_serverMatch5.1.1
OR
ibmwebsphere_application_serverMatch5.1.1.1
OR
ibmwebsphere_application_serverMatch5.1.1.2
OR
ibmwebsphere_application_serverMatch5.1.1.3
OR
ibmwebsphere_application_serverMatch5.1.1.4
OR
ibmwebsphere_application_serverMatch5.1.1.5
OR
ibmwebsphere_application_serverMatch5.1.1.6
OR
ibmwebsphere_application_serverMatch5.1.1.7
OR
ibmwebsphere_application_serverMatch5.1.1.8
OR
ibmwebsphere_application_serverMatch5.1.1.9
OR
ibmwebsphere_application_serverMatch5.1.1.10
OR
ibmwebsphere_application_serverMatch5.1.1.11
OR
ibmwebsphere_application_serverMatch5.1.1.12
OR
ibmwebsphere_application_serverMatch5.1.1.13
OR
ibmwebsphere_application_serverMatch5.1.1.14
OR
ibmwebsphere_application_serverMatch5.1.1.15
OR
ibmwebsphere_application_serverMatch5.1.1.16
OR
ibmwebsphere_application_serverMatch5.1.1.17
OR
ibmwebsphere_application_serverMatch5.1.1.18
VendorProductVersionCPE
ibmwebsphere_application_server*cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0cpe:2.3:a:ibm:websphere_application_server:5.0:*:z_os:*:*:*:*:*
ibmwebsphere_application_server5.0.0cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.1cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.2cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.2.1cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.2.2cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.2.3cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*
ibmwebsphere_application_server5.0.2.4cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 461

Related

prion 1
cvelist 1
cve 1
prion
prion
Crlf injection
2009-02-10 22:30:00
cvelist
cvelist
CVE-2008-4283
2009-02-10 22:13:00
cve
cve
CVE-2008-4283
2009-02-10 22:30:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

79.1%

JSON
Related for NVD:CVE-2008-4283
prion1cvelist1cve1