CVE-2014-4803 — CRLF Injection in IBM Curam Social Program Management

3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.1%
top 65.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Curam Social Program Management
Timeline
PublishedFeb 13
Latest updateMay 17

Description

CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix007, and 6.0.5 before 6.0.5.5 iFix003, when WebSphere Application Server is not used, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via an unspecified parameter.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w688-96v8-r2cq: CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6↗2022-05-17
▶
CVEList
CVE-2014-4803: CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6↗2015-02-13
▶
CVE-2014-4803 — CRLF Injection in IBM | cvebase