HTTP Header Injection Vulnerability in IBM Cloud Pak for Automation

CVE-2021-29872

What is CVE-2021-29872?

The IBM Cloud Pak for Automation versions 21.0.1 and 21.0.2 contain a vulnerability that allows improper validation of HTTP HOST headers. A remote attacker can exploit this weakness by sending a crafted HTTP request, which may lead to severe consequences such as cross-site scripting (XSS), cache poisoning, or session hijacking. It is essential for organizations utilizing these versions to take immediate action to secure their systems against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References