CVE-2014-6151: Input Validation
Published Oct 25, 2014
·Updated
CRLF injection vulnerability in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected Software
2 affected components
IBM Tivoli Integrated Portal=2.1
IBM Tivoli Integrated Portal=2.2
Event History
Oct 25, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6151?
CVE-2014-6151 has a medium severity rating due to its potential for HTTP response splitting attacks.
2
How do I fix CVE-2014-6151?
To fix CVE-2014-6151, update IBM Tivoli Integrated Portal to a fixed version following the recommendations provided by IBM.
3
Who is affected by CVE-2014-6151?
CVE-2014-6151 affects IBM Tivoli Integrated Portal versions 2.1 and 2.2.
4
What type of attack can be executed using CVE-2014-6151?
CVE-2014-6151 can be exploited to conduct HTTP response splitting attacks.
5
What is the nature of the vulnerability in CVE-2014-6151?
CVE-2014-6151 is a CRLF injection vulnerability that allows remote authenticated users to inject arbitrary HTTP headers.