Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in HTTP Response Splitting affects IBM Algorithmics Algo Risk Application & AlgoOne Core- CVE-2015-2017 |
|
| Affected software | IBM |
|
The IBM WebSphere Portal is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information.CVE(s): CVE-2015-2017Affected product(s) and affected version(s):ARA 5.00, 5.1.0 AlgoCore 5.1.0, 5.0.0 Refer to the More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_http_response_splitting_affects_ibm_algorithmics_algo_risk_application_algoone_core_cve_2015_2017?lang=en_us |
|