CVEvulnerability
CVE-2011-4237
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-94
Description
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Affected configurations
• cisco ciscoworks common services 4.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/49094 secunia.com
- http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html www.cisco.com
- http://www.nessus.org/plugins/index.php?view=single&id=58950 www.nessus.org
- http://secunia.com/advisories/49094 secunia.com
- http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/release/notes/lms42rel.html www.cisco.com
- http://www.nessus.org/plugins/index.php?view=single&id=58950 www.nessus.org