exploitDog

CVE-2007-1608

Опубликовано: 22 мар. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*

Версия до 6.0.2.15 (включая)

EPSS

Процентиль: 78%

0.01135

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hgcv-9m52-v3p6

github

почти 4 года назад

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.

EPSS

Процентиль: 78%

0.01135

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other