CVE-2024-51454

Name of the Vulnerable Software and Affected Versions IBM Engineering Workflow Management versions 7.0.2 through 7.0.2 Interim Fix 035 IBM Engineering Workflow Management versions 7.0.3 through 7.0.3 Interim Fix 017 IBM Engineering Workflow Management versions 7.1 through 7.1 Interim Fix 004

Description Improper validation of input in the HOST header allows for HTTP header injection. This flaw could enable an attacker to perform cross-site scripting (injecting malicious scripts into web pages), cache poisoning (manipulating a web cache to serve fraudulent content), or session hijacking (stealing session identifiers to impersonate users).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.