CVE-2011-4237: Code Injection
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4237?
CVE-2011-4237 is classified as a high severity vulnerability due to its potential for remote exploitation via CRLF injection.
How do I fix CVE-2011-4237?
To mitigate CVE-2011-4237, update the affected Cisco products to the latest patched versions as advised by Cisco.
What products are affected by CVE-2011-4237?
CVE-2011-4237 affects CiscoWorks Common Services 4.0 and Cisco Prime LAN Management Solution 4.2.
What kind of attacks can CVE-2011-4237 facilitate?
CVE-2011-4237 can facilitate HTTP response splitting attacks through the injection of arbitrary HTTP headers.
When was CVE-2011-4237 disclosed?
CVE-2011-4237 was disclosed in 2011 as a vulnerability impacting specific Cisco network management solutions.