CVE-2021-39028
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866.
IBM Engineering Lifecycle Optimization - Publishing versiones 6.0.6, 6.0.6.1, 7.0, 7.0.1 y 7.0.2, es vulnerable a una inyección de encabezados HTTP, causada por la incorrecta comprobación de la entrada de los encabezados HOST. Esto podría permitir a un atacante conducir varios ataques contra el sistema vulnerable, incluyendo de tipo cross-site scripting, envenenamiento de caché o secuestro de sesión. IBM X-Force ID: 213866
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-08-16 CVE Reserved
- 2022-07-14 CVE Published
- 2024-02-04 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.ibm.com/support/pages/node/6603347 | 2022-07-18 |
URL | Date | SRC |
---|---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/213866 | 2022-07-18 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 6.0.6 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "6.0.6" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 6.0.6 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "6.0.6" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 6.0.6.1 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "6.0.6.1" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 6.0.6.1 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "6.0.6.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0.1 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0.1" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0.1 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0.2 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0.2" | - |
Affected
| in | Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | - | - |
Safe
|
Ibm Search vendor "Ibm" | Engineering Lifecycle Optimization Publishing Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" | 7.0.2 Search vendor "Ibm" for product "Engineering Lifecycle Optimization Publishing" and version "7.0.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|