PT-2014-2730

CVE-2013-3998

·

Published

2014-03-26

·

Updated

2017-08-29

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2
Description The issue concerns a CRLF injection vulnerability in the Web Application Enterprise Console. This allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
Recommendations For IBM InfoSphere BigInsights versions 1.1 through 2.1 before FP2, update to version 2.1 FP2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2013-3998
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com