CVE-2011-4237: Code Injection
First published: Thu May 03 2012(Updated: )
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime LAN Management Solution | =4.2 | |
| Cisco CiscoWorks Common Services | =4.0 | |
| Cisco Prime LAN Management Solution | =4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-4237?
CVE-2011-4237 is classified as a high severity vulnerability due to its potential for remote exploitation via CRLF injection.
How do I fix CVE-2011-4237?
To mitigate CVE-2011-4237, update the affected Cisco products to the latest patched versions as advised by Cisco.
What products are affected by CVE-2011-4237?
CVE-2011-4237 affects CiscoWorks Common Services 4.0 and Cisco Prime LAN Management Solution 4.2.
What kind of attacks can CVE-2011-4237 facilitate?
CVE-2011-4237 can facilitate HTTP response splitting attacks through the injection of arbitrary HTTP headers.
When was CVE-2011-4237 disclosed?
CVE-2011-4237 was disclosed in 2011 as a vulnerability impacting specific Cisco network management solutions.
- agent/type
- agent/weakness
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco prime lan management solution
- version/cisco prime lan management solution/4.2
- canonical/cisco ciscoworks common services
- version/cisco ciscoworks common services/4.0