CVE-2014-3069 — CRLF Injection in IBM Curam Social Program Management

4 documents4 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 63.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Curam Social Program Management
Timeline
PublishedAug 12
Latest updateMay 17

Description

Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x5jq-472r-hm3v: Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6↗2022-05-17
▶
CVEList
CVE-2014-3069: Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6↗2014-08-12
▶
CVE-2014-3069 — CRLF Injection in IBM | cvebase