CVE-2014-9564

Опубликовано: 25 авг. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting (XSS) attacks, or obtain sensitive information via multiple unspecified parameters.

Ссылки

http://www.securityfocus.com/bid/74931
Third Party Advisory
VDB Entry
https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5098173
Vendor Advisory
http://www.securityfocus.com/bid/74931
Third Party Advisory
VDB Entry
https://www.ibm.com/support/home/docdisplay?lndocid=MIGR-5098173
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ibm:ib6131_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:ib6131:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:ibm:en6131_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:ibm:en6131:-:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00285

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-93

Связанные уязвимости

GHSA-528x-45h9-f5pq