Lucene search

K
nvd[email protected]NVD:CVE-2014-6151
HistoryOct 25, 2014 - 10:55 a.m.

CVE-2014-6151

2014-10-2510:55:06
CWE-20
web.nvd.nist.gov
4

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

57.3%

CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected configurations

Nvd
Node
ibmtivoli_integrated_portalMatch2.1
OR
ibmtivoli_integrated_portalMatch2.2

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

57.3%

Related for NVD:CVE-2014-6151