HTTP Header Injection Vulnerability in IBM Maximo Asset Management

CVE-2021-29854

What is CVE-2021-29854?

IBM Maximo Asset Management versions 7.6.1.1 and 7.6.1.2 are susceptible to an HTTP header injection flaw due to improper validation of input from the HOST headers. By sending a maliciously crafted HTTP request, an attacker can inject an HTTP HOST header, potentially leading to a range of attacks, including cross-site scripting, cache poisoning, or session hijacking. This vulnerability poses significant risks for deploying secure applications and systems reliant on affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References