CVE-2014-4803
Severity Score
3.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix007, and 6.0.5 before 6.0.5.5 iFix003, when WebSphere Application Server is not used, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via an unspecified parameter.
Vulnerabilidad de inyección CRLF en la implementación Universal Access en IBM Curam Social Program Management 6.0 SP2 anterior a EP26, 6.0.4 anterior a 6.0.4.5 iFix007, y 6.0.5 anterior a 6.0.5.5 iFix003, cuando WebSphere Application Server no está utilizado, permite a usuarios remotos autenticados inyectar cabeceras HTTP arbitrarias y realizar ataques de la división de respuestas HTTP a través de un parámetro no especificado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-07-09 CVE Reserved
- 2015-02-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95305 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21695925 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | <= 6.0 Search vendor "Ibm" for product "Curam Social Program Management" and version " <= 6.0" | sp2 |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.0 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.1 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.2 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.3 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.4 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.4.5 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.4.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.0 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.1 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.2 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.3 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.4 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Curam Social Program Management Search vendor "Ibm" for product "Curam Social Program Management" | 6.0.5.5 Search vendor "Ibm" for product "Curam Social Program Management" and version "6.0.5.5" | - |
Affected
| ||||||