CVE-2008-4283 CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and co...
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | <= 5.1.1.19 | No fix listed |
| ibm websphere application server | = 5.0 | No fix listed |
| ibm websphere application server | = 5.0.0 | No fix listed |
| ibm websphere application server | = 5.0.1 | No fix listed |
| ibm websphere application server | = 5.0.2 | No fix listed |
| ibm websphere application server | = 5.0.2.1 | No fix listed |
| ibm websphere application server | = 5.0.2.2 | No fix listed |
| ibm websphere application server | = 5.0.2.3 | No fix listed |
| ibm websphere application server | = 5.0.2.4 | No fix listed |
| ibm websphere application server | = 5.0.2.5 | No fix listed |
| ibm websphere application server | = 5.0.2.6 | No fix listed |
| ibm websphere application server | = 5.0.2.7 | No fix listed |
| ibm websphere application server | = 5.0.2.8 | No fix listed |
| ibm websphere application server | = 5.0.2.9 | No fix listed |
| ibm websphere application server | = 5.0.2.10 | No fix listed |
| ibm websphere application server | = 5.0.2.11 | No fix listed |
| ibm websphere application server | = 5.0.2.12 | No fix listed |
| ibm websphere application server | = 5.0.2.13 | No fix listed |
| ibm websphere application server | = 5.0.2.14 | No fix listed |
| ibm websphere application server | = 5.0.2.15 | No fix listed |
| ibm websphere application server | = 5.0.2.16 | No fix listed |
| ibm websphere application server | = 5.1.0 | No fix listed |
| ibm websphere application server | = 5.1.0.2 | No fix listed |
| ibm websphere application server | = 5.1.0.3 | No fix listed |
| ibm websphere application server | = 5.1.0.4 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 5.1.0.5 | No fix listed |
| ibm websphere application server | = 5.1.1 | No fix listed |
| ibm websphere application server | = 5.1.1.1 | No fix listed |
| ibm websphere application server | = 5.1.1.2 | No fix listed |
| ibm websphere application server | = 5.1.1.3 | No fix listed |
| ibm websphere application server | = 5.1.1.4 | No fix listed |
| ibm websphere application server | = 5.1.1.5 | No fix listed |
| ibm websphere application server | = 5.1.1.6 | No fix listed |
| ibm websphere application server | = 5.1.1.7 | No fix listed |
| ibm websphere application server | = 5.1.1.8 | No fix listed |
| ibm websphere application server | = 5.1.1.9 | No fix listed |
| ibm websphere application server | = 5.1.1.10 | No fix listed |
| ibm websphere application server | = 5.1.1.11 | No fix listed |
| ibm websphere application server | = 5.1.1.12 | No fix listed |
| ibm websphere application server | = 5.1.1.13 | No fix listed |
| ibm websphere application server | = 5.1.1.14 | No fix listed |
| ibm websphere application server | = 5.1.1.15 | No fix listed |
| ibm websphere application server | = 5.1.1.16 | No fix listed |
| ibm websphere application server | = 5.1.1.17 | No fix listed |
| ibm websphere application server | = 5.1.1.18 | No fix listed |
References
- SE35864 vendor-advisory
- PK69929 vendor-advisory
- 33700 vdb-entry
- websphere-webcontainer-response-splitting(47199) vdb-entry