CVE-2012-0310

Description

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72306

http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf

http://www.securityfocus.com/bid/51375

http://www.cogentdatahub.com/ReleaseNotes.html

http://secunia.com/advisories/47525

http://secunia.com/advisories/47496

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000002

http://jvn.jp/en/jp/JVN63249231/index.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS