HTTP Response Splitting Vulnerability in SafeNet KeySecure Management Console
CVE-2021-28979

6.5MEDIUM

Key Information:

Vendor

Thalesgroup

Status
Safenet Keysecure
Vendor
CVE Published:
16 June 2021

What is CVE-2021-28979?

The SafeNet KeySecure Management Console 8.12.0 is susceptible to HTTP response splitting attacks, allowing remote attackers to manipulate server responses. By crafting a malicious URL, an attacker can exploit this vulnerability, leading to potentially harmful outcomes such as web cache poisoning or session hijacking. Users are encouraged to review their systems and apply security measures to mitigate the risk posed by this vulnerability.

References

https://www.gruppotim.it/redteam

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.