CVEvulnerability
CVE-2014-6151
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected configurations
• ibm tivoli integrated portal 2.1
• ibm tivoli integrated portal 2.2
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/61899 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21687541 Vendor Advisory
- http://www.securityfocus.com/bid/70727 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97033 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/61899 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI27417 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21687541 Vendor Advisory
- http://www.securityfocus.com/bid/70727 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97033 exchange.xforce.ibmcloud.com