Vulnerability Details CVE-2016-3118
CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.4
References
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx
Products affected by CVE-2016-3118
-
cpe:2.3:a:broadcom:api_gateway:7.1
-
cpe:2.3:a:broadcom:api_gateway:8.0
-
cpe:2.3:a:broadcom:api_gateway:8.1
-
cpe:2.3:a:broadcom:api_gateway:8.2
-
cpe:2.3:a:broadcom:api_gateway:8.3
-
cpe:2.3:a:broadcom:api_gateway:8.4