NVD

Id
39690  
Name
CVE-2013-3998  
Description
CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-03-26  
Modified Date
2014-03-26  
Seq
2013-3998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201921 39690 CVE-2013-3998 http://www-01.ibm.com/support/docview.wss?uid=swg21667812  View
201922 39690 CVE-2013-3998 ibm-infosphere-cve20133998-resp-splitting(84987)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24684 JVNDB-2013-006259 IBM InfoSphere BigInsights の Web Application Enterprise Console における CRLF インジェクションの脆弱性 IBM InfoSphere BigInsights の Web Application Enterprise Console には、CRLF インジェクションの脆弱性が存在します。 CVE-2013-3998 63940 CVE-2013-3998 39690 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006259.html 2013-06-07 2014-03-27 View