Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-4023
HistoryNov 08, 2012 - 11:46 a.m.

CVE-2012-4023

2012-11-0811:46:24
CWE-20
[email protected]
web.nvd.nist.gov
2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.002

Percentile

59.9%

JSON

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected configurations

Nvd
Node
simon_brownpebbleRange≤2.6.3
OR
simon_brownpebbleMatch1.0
OR
simon_brownpebbleMatch1.1
OR
simon_brownpebbleMatch1.2
OR
simon_brownpebbleMatch1.3
OR
simon_brownpebbleMatch1.4
OR
simon_brownpebbleMatch1.4beta1
OR
simon_brownpebbleMatch1.4beta2
OR
simon_brownpebbleMatch1.4beta3
OR
simon_brownpebbleMatch1.4.1
OR
simon_brownpebbleMatch1.4.2
OR
simon_brownpebbleMatch1.5
OR
simon_brownpebbleMatch1.5beta1
OR
simon_brownpebbleMatch1.5beta2
OR
simon_brownpebbleMatch1.5.1
OR
simon_brownpebbleMatch1.6beta3
OR
simon_brownpebbleMatch1.7
OR
simon_brownpebbleMatch1.7beta1
OR
simon_brownpebbleMatch1.7.1
OR
simon_brownpebbleMatch1.7.2
OR
simon_brownpebbleMatch1.8
OR
simon_brownpebbleMatch1.9
OR
simon_brownpebbleMatch2.0
OR
simon_brownpebbleMatch2.0.0m1
OR
simon_brownpebbleMatch2.0.0m2
OR
simon_brownpebbleMatch2.0.0m3
OR
simon_brownpebbleMatch2.0.0rc1
OR
simon_brownpebbleMatch2.0.0rc2
OR
simon_brownpebbleMatch2.0.1
OR
simon_brownpebbleMatch2.1
OR
simon_brownpebbleMatch2.1rc1
OR
simon_brownpebbleMatch2.2
OR
simon_brownpebbleMatch2.3
OR
simon_brownpebbleMatch2.3.1
OR
simon_brownpebbleMatch2.3.2
OR
simon_brownpebbleMatch2.4
OR
simon_brownpebbleMatch2.4rc2
OR
simon_brownpebbleMatch2.5
OR
simon_brownpebbleMatch2.5m1
OR
simon_brownpebbleMatch2.5m2
OR
simon_brownpebbleMatch2.5rc1
OR
simon_brownpebbleMatch2.5.1
OR
simon_brownpebbleMatch2.5.2
OR
simon_brownpebbleMatch2.5.3
OR
simon_brownpebbleMatch2.6
OR
simon_brownpebbleMatch2.6m1
OR
simon_brownpebbleMatch2.6.1
OR
simon_brownpebbleMatch2.6.2
VendorProductVersionCPE
simon_brownpebble*cpe:2.3:a:simon_brown:pebble:*:*:*:*:*:*:*:*
simon_brownpebble1.0cpe:2.3:a:simon_brown:pebble:1.0:*:*:*:*:*:*:*
simon_brownpebble1.1cpe:2.3:a:simon_brown:pebble:1.1:*:*:*:*:*:*:*
simon_brownpebble1.2cpe:2.3:a:simon_brown:pebble:1.2:*:*:*:*:*:*:*
simon_brownpebble1.3cpe:2.3:a:simon_brown:pebble:1.3:*:*:*:*:*:*:*
simon_brownpebble1.4cpe:2.3:a:simon_brown:pebble:1.4:*:*:*:*:*:*:*
simon_brownpebble1.4cpe:2.3:a:simon_brown:pebble:1.4:beta1:*:*:*:*:*:*
simon_brownpebble1.4cpe:2.3:a:simon_brown:pebble:1.4:beta2:*:*:*:*:*:*
simon_brownpebble1.4cpe:2.3:a:simon_brown:pebble:1.4:beta3:*:*:*:*:*:*
simon_brownpebble1.4.1cpe:2.3:a:simon_brown:pebble:1.4.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 481

Related

jvn 1
prion 1
cvelist 1
cve 1
jvn
jvn
JVN#39563771: Pebble vulnerable to HTTP header injection
2012-11-02 00:00:00
prion
prion
Crlf injection
2012-11-08 11:46:00
cvelist
cvelist
CVE-2012-4023
2012-11-08 11:00:00
cve
cve
CVE-2012-4023
2012-11-08 11:46:24

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.002

Percentile

59.9%

JSON
Related for NVD:CVE-2012-4023
jvn1prion1cvelist1cve1