medium4.3
CVE-2014-2137
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP header…
Impact
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Web Security Virtual Appliance | through 7.7 Versions 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4 |
| Cisco | Web Security Appliance | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2137
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33608
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2137
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33608