Boletines de Vulnerabilidades

IBM Security Bulletin: Vulnerability in Apache Cordova affects IBM Worklight, IBM Mobile Foundation and IBM MobileFirst Platform Foundation (CVE-2015-5204)
Información sobre el sistema

Software afectado	IBM
Descripción
Apache Cordova File Transfer Plugin for Android is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. CVE(s): CVE-2015-5204 Affected product(s) and affected More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_apache_cordova_affects_ibm_worklight_ibm_mobile_foundation_and_ibm_mobilefirst_platform_foundation_cve_2015_5204?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2015-5204 ,CVE-2015-7450 ,CVE-2015-3253 ,CVE-2015-7438 ,CVE-2015-7437 ,CVE-2015-4872 ,CVE-2015-4734 ,CVE-2015-5006 and CVE-2015-7400.