CVE-2008-4283
10.02.2009, 22:30
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_application_server | 𝑥 ≤ 5.1.1.19 |
| ibm | websphere_application_server | 5.0 |
| ibm | websphere_application_server | 5.0 |
| ibm | websphere_application_server | 5.0.0 |
| ibm | websphere_application_server | 5.0.1 |
| ibm | websphere_application_server | 5.0.2 |
| ibm | websphere_application_server | 5.0.2.1 |
| ibm | websphere_application_server | 5.0.2.2 |
| ibm | websphere_application_server | 5.0.2.3 |
| ibm | websphere_application_server | 5.0.2.4 |
| ibm | websphere_application_server | 5.0.2.5 |
| ibm | websphere_application_server | 5.0.2.6 |
| ibm | websphere_application_server | 5.0.2.7 |
| ibm | websphere_application_server | 5.0.2.8 |
| ibm | websphere_application_server | 5.0.2.9 |
| ibm | websphere_application_server | 5.0.2.10 |
| ibm | websphere_application_server | 5.0.2.11 |
| ibm | websphere_application_server | 5.0.2.12 |
| ibm | websphere_application_server | 5.0.2.13 |
| ibm | websphere_application_server | 5.0.2.14 |
| ibm | websphere_application_server | 5.0.2.15 |
| ibm | websphere_application_server | 5.0.2.16 |
| ibm | websphere_application_server | 5.1.0 |
| ibm | websphere_application_server | 5.1.0.2 |
| ibm | websphere_application_server | 5.1.0.3 |
| ibm | websphere_application_server | 5.1.0.4 |
| ibm | websphere_application_server | 5.1.0.5 |
| ibm | websphere_application_server | 5.1.1 |
| ibm | websphere_application_server | 5.1.1.1 |
| ibm | websphere_application_server | 5.1.1.2 |
| ibm | websphere_application_server | 5.1.1.3 |
| ibm | websphere_application_server | 5.1.1.4 |
| ibm | websphere_application_server | 5.1.1.5 |
| ibm | websphere_application_server | 5.1.1.6 |
| ibm | websphere_application_server | 5.1.1.7 |
| ibm | websphere_application_server | 5.1.1.8 |
| ibm | websphere_application_server | 5.1.1.9 |
| ibm | websphere_application_server | 5.1.1.10 |
| ibm | websphere_application_server | 5.1.1.11 |
| ibm | websphere_application_server | 5.1.1.12 |
| ibm | websphere_application_server | 5.1.1.13 |
| ibm | websphere_application_server | 5.1.1.14 |
| ibm | websphere_application_server | 5.1.1.15 |
| ibm | websphere_application_server | 5.1.1.16 |
| ibm | websphere_application_server | 5.1.1.17 |
| ibm | websphere_application_server | 5.1.1.18 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References