CRLF Injection Vulnerability in IBM Curam Social Program Management Software
CVE-2014-4803

Currently unrated

Key Information:

Vendor: IBM
Status: Curam Social Program Management
Vendor: CVE Published:; 13 February 2015

What is CVE-2014-4803?

A CRLF injection vulnerability exists in the Universal Access implementation of IBM Curam Social Program Management. When users operate the software without the WebSphere Application Server, authenticated attackers can exploit this vulnerability to inject arbitrary HTTP headers. This can lead to HTTP response splitting attacks, which may disrupt the user experience or be leveraged for additional malicious actions. Users are urged to update to the latest versions to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95305

vdb-entryx_refsource_XF

http://www-01.ibm.com/support/docview.wss?uid=swg21695925

x_refsource_CONFIRM

Timeline

Vulnerability published
Feb 13, 2015
Vulnerability Reserved
Jul 9, 2014

JSON

IBM

What is CVE-2014-4803?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.