CVE-2023-24975

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-24975
IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/247030 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6959369 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:spectrum_symphony:7.3.0:*:*:*:*:*:*:*
History

07 Nov 2023, 04:08

Type Values Removed Values Added
Summary IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030. IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.
Information

Published : 2023-03-10 21:15

Updated : 2024-02-28 19:51

NVD link : CVE-2023-24975

Mitre link : CVE-2023-24975

CVE.ORG link : CVE-2023-24975

JSON object : View

Products Affected

ibm

  • spectrum_symphony
CWE
CWE-20

Improper Input Validation