CVEvulnerability
CVE-2009-0868
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
• fujitsu jasmine2000
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/33971 Vendor Advisory
- http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html Vendor Advisory
- http://www.securityfocus.com/bid/33832 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48818 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/33971 Vendor Advisory
- http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html Vendor Advisory
- http://www.securityfocus.com/bid/33832 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48818 exchange.xforce.ibmcloud.com