Skip to content
OpenAdvisories
Unscored CVE-2016-6484 EUVD-2016-7407GHSA-35wp-mq65-94rh

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers an…

Published Jan 23, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.

References