Multiple IBM Products CVE-2017-1291 HTTP Response Splitting Vulnerability
BID:98637
Info
Multiple IBM Products CVE-2017-1291 HTTP Response Splitting Vulnerability
| Bugtraq ID: | 98637 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1291 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2017 12:00AM |
| Updated: | May 23 2017 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Tivoli Integration Composer 0 IBM SmartCloud Control Desk 0 IBM Maximo for Utilities 0 IBM Maximo for Transportation 0 IBM Maximo for Oil and Gas 0 IBM Maximo for Nuclear Power 0 IBM Maximo for Life Sciences 0 IBM Maximo for Government 0 IBM Maximo for Aviation 0 IBM Maximo Asset Management Essentials 7.5 IBM Maximo Asset Management 7.6 IBM Maximo Asset Management 7.5 IBM Control Desk 0 |
| Not Vulnerable: | |
Discussion
Multiple IBM Products CVE-2017-1291 HTTP Response Splitting Vulnerability
Multiple IBM Products are prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
Multiple IBM Products are prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.