Cisco Unified Operations Manager CVE-2013-3439 Unspecified HTTP Header Injection Vulnerability

Bugtraq ID:	61416
Class:	Input Validation Error
CVE:	CVE-2013-3439
Remote:	Yes
Local:	No
Published:	Jul 22 2013 12:00AM
Updated:	Jul 22 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Cisco Unified Operations Manager (CUOM) 8.6
Not Vulnerable:

Cisco Unified Operations Manager CVE-2013-3439 Unspecified HTTP Header Injection Vulnerability

Cisco Unified Operations Manager is prone to a vulnerability which allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input.

By inserting arbitrary headers into an HTTP response, attackers may be able to launch various attacks, including cross-site request forgery, cross-site scripting, and HTTP-request smuggling.

This issue is being tracked by Cisco Bug ID CSCud80182.

Cisco Unified Operations Manager CVE-2013-3439 Unspecified HTTP Header Injection Vulnerability

Attackers can exploit this issue through a browser.

Cisco Unified Operations Manager CVE-2013-3439 Unspecified HTTP Header Injection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Unified Operations Manager CVE-2013-3439 Unspecified HTTP Header Injection Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified Operations Manager HTTP Header Injection Vulnerability (Cisco)