Host Header Injection in Canon Oce Print Exec Workgroup by Canon
CVE-2021-39367

5.3MEDIUM

Key Information:

Vendor

Canon

Status
Oce Print Exec Workgroup
Vendor
CVE Published:
23 August 2021

What is CVE-2021-39367?

The Canon Oce Print Exec Workgroup 1.3.2 is vulnerable to a host header injection, which may allow attackers to manipulate the behavior of the application. This type of vulnerability can lead to various attacks, including bypassing security measures and potentially compromising the application environment. Proper validation of the host header is crucial to mitigate the risks associated with this vulnerability.

References

https://github.com/IthacaLabs/Canon/tree/main/OCE_Print_E...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.