PT-2014-2730
CVE-2013-3998
·
تاريخ النشر
2014-03-26
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2
Description
The issue concerns a CRLF injection vulnerability in the Web Application Enterprise Console. This allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
Recommendations
For IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2, update to version 2.1 FP2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾