Vulnerability Details CVE-2007-1608
CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/34484
- http://secunia.com/advisories/24552
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK39732
- http://www.securityfocus.com/bid/23086
- http://www.securitytracker.com/id?1017806
- http://www.vupen.com/english/advisories/2007/1062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33123
- http://osvdb.org/34484
- http://secunia.com/advisories/24552
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK39732
- http://www.securityfocus.com/bid/23086
- http://www.securitytracker.com/id?1017806
- http://www.vupen.com/english/advisories/2007/1062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33123
Products affected by CVE-2007-1608
-
cpe:2.3:a:ibm:websphere_application_server:-
-
cpe:2.3:a:ibm:websphere_application_server:2.0
-
cpe:2.3:a:ibm:websphere_application_server:3.0
-
cpe:2.3:a:ibm:websphere_application_server:3.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:3.0.2
-
cpe:2.3:a:ibm:websphere_application_server:3.0.2.1
-
cpe:2.3:a:ibm:websphere_application_server:3.0.2.2
-
cpe:2.3:a:ibm:websphere_application_server:3.0.2.3
-
cpe:2.3:a:ibm:websphere_application_server:3.0.2.4
-
cpe:2.3:a:ibm:websphere_application_server:3.0.21
-
cpe:2.3:a:ibm:websphere_application_server:3.0.9.20
-
cpe:2.3:a:ibm:websphere_application_server:3.5
-
cpe:2.3:a:ibm:websphere_application_server:3.5.1
-
cpe:2.3:a:ibm:websphere_application_server:3.5.2
-
cpe:2.3:a:ibm:websphere_application_server:3.5.3
-
cpe:2.3:a:ibm:websphere_application_server:3.52
-
cpe:2.3:a:ibm:websphere_application_server:4.0.1
-
cpe:2.3:a:ibm:websphere_application_server:4.0.2
-
cpe:2.3:a:ibm:websphere_application_server:4.0.3
-
cpe:2.3:a:ibm:websphere_application_server:4.0.4
-
cpe:2.3:a:ibm:websphere_application_server:5.0
-
cpe:2.3:a:ibm:websphere_application_server:5.0.0
-
cpe:2.3:a:ibm:websphere_application_server:5.0.1
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.1
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.10
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.11
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.12
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.13
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.14
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.15
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.16
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.2
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.3
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.4
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.5
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.6
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.7
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.8
-
cpe:2.3:a:ibm:websphere_application_server:5.0.2.9
-
cpe:2.3:a:ibm:websphere_application_server:5.02.15
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0.2
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0.3
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0.4
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0.5
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.1
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.10
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.11
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.12
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.13
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.14
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.15
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.16
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.17
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.2
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.3
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.4
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.5
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.6
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.7
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.8
-
cpe:2.3:a:ibm:websphere_application_server:5.1.1.9
-
cpe:2.3:a:ibm:websphere_application_server:6.0
-
cpe:2.3:a:ibm:websphere_application_server:6.0.0.1
-
cpe:2.3:a:ibm:websphere_application_server:6.0.0.2
-
cpe:2.3:a:ibm:websphere_application_server:6.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.1
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.11
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.13
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.15
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.17
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.2
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.3
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.5
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.7
-
cpe:2.3:a:ibm:websphere_application_server:6.0.1.9
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.1
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.11
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.13
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.15
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.2
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.3
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.4
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.5
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.6
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.7
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.8
-
cpe:2.3:a:ibm:websphere_application_server:6.0.2.9