Description
CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
References
- 34484 vdb-entry
- PK39732 vendor-advisory
- ADV-2007-1062 vdb-entry
- 23086 vdb-entry
- websphere-unspecified-response-splitting(33123) vdb-entry
- 24552 third-party-advisory
- 1017806 vdb-entry