CVE-2014-2138 in Cisco Security Manager

Resumen (Inglés)

CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349.

Reservar

2014-02-25

Divulgación

2014-04-01

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
12784	Cisco Security Manager HTTP Header escalada de privilegios	20	No probado	Arreglo oficial	CVE-2014-2138