CVE-2016-3118 CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impa...
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom api gateway | = 7.1 | No fix listed |
| broadcom api gateway | = 8.0 | No fix listed |
| broadcom api gateway | = 8.1 | No fix listed |
| broadcom api gateway | = 8.2 | No fix listed |
| broadcom api gateway | = 8.3 | No fix listed |
| broadcom api gateway | = 8.4 | No fix listed |
References
- www.ca.com vendor-advisory