What is the severity of CVE-2015-2028?

CVE-2015-2028 is classified as a medium-severity vulnerability that allows HTTP header injection.

How do I fix CVE-2015-2028?

Updating IBM WebSphere eXtreme Scale to version 7.1.0.3 or 7.1.1.1 or later will mitigate CVE-2015-2028.

What types of attacks can be executed due to CVE-2015-2028?

CVE-2015-2028 can be exploited to perform HTTP response splitting attacks.

Which versions of IBM WebSphere eXtreme Scale are affected by CVE-2015-2028?

CVE-2015-2028 affects IBM WebSphere eXtreme Scale versions 7.1.0, 7.1.0.2, and 7.1.1 before 7.1.1.1.

Can CVE-2015-2028 affect user data?

Yes, CVE-2015-2028 can potentially lead to unauthorized manipulation of HTTP responses, which may compromise user data.

Vulnerability/
CVE-2015-2028

medium

4.3

CWE

4/10/2015

6/8/2024

CVE-2015-2028: CRLF Injection

First published: Sun Oct 04 2015(Updated: )

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM WebSphere eXtreme Scale	=7.1.0
IBM WebSphere eXtreme Scale	=7.1.0.2
IBM WebSphere eXtreme Scale	=7.1.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-2028?
CVE-2015-2028 is classified as a medium-severity vulnerability that allows HTTP header injection.
How do I fix CVE-2015-2028?
Updating IBM WebSphere eXtreme Scale to version 7.1.0.3 or 7.1.1.1 or later will mitigate CVE-2015-2028.
What types of attacks can be executed due to CVE-2015-2028?
CVE-2015-2028 can be exploited to perform HTTP response splitting attacks.
Which versions of IBM WebSphere eXtreme Scale are affected by CVE-2015-2028?
CVE-2015-2028 affects IBM WebSphere eXtreme Scale versions 7.1.0, 7.1.0.2, and 7.1.1 before 7.1.1.1.
Can CVE-2015-2028 affect user data?
Yes, CVE-2015-2028 can potentially lead to unauthorized manipulation of HTTP responses, which may compromise user data.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/severity
agent/remedy
agent/references
agent/author
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/ibm
canonical/ibm websphere extreme scale
version/ibm websphere extreme scale/7.1.0
version/ibm websphere extreme scale/7.1.0.2
version/ibm websphere extreme scale/7.1.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2015-2028?
CVE-2015-2028 is classified as a medium-severity vulnerability that allows HTTP header injection.
How do I fix CVE-2015-2028?
Updating IBM WebSphere eXtreme Scale to version 7.1.0.3 or 7.1.1.1 or later will mitigate CVE-2015-2028.
What types of attacks can be executed due to CVE-2015-2028?
CVE-2015-2028 can be exploited to perform HTTP response splitting attacks.
Which versions of IBM WebSphere eXtreme Scale are affected by CVE-2015-2028?
CVE-2015-2028 affects IBM WebSphere eXtreme Scale versions 7.1.0, 7.1.0.2, and 7.1.1 before 7.1.1.1.
Can CVE-2015-2028 affect user data?
Yes, CVE-2015-2028 can potentially lead to unauthorized manipulation of HTTP responses, which may compromise user data.

CVE-2015-2028: CRLF Injection

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-2028?

How do I fix CVE-2015-2028?

What types of attacks can be executed due to CVE-2015-2028?

Which versions of IBM WebSphere eXtreme Scale are affected by CVE-2015-2028?

Can CVE-2015-2028 affect user data?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2015-2028?

How do I fix CVE-2015-2028?

What types of attacks can be executed due to CVE-2015-2028?

Which versions of IBM WebSphere eXtreme Scale are affected by CVE-2015-2028?

Can CVE-2015-2028 affect user data?