What is the severity of CVE-2016-3118?

CVE-2016-3118 has been classified as a CRLF injection vulnerability, which can lead to unspecified impacts when exploited.

How do I fix CVE-2016-3118?

To mitigate CVE-2016-3118, update to versions 7.1.04, 8.3.01, or 8.4.01 of the CA API Gateway.

What products are affected by CVE-2016-3118?

CVE-2016-3118 affects CA API Gateway versions 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01.

Can CVE-2016-3118 be exploited remotely?

Yes, CVE-2016-3118 allows remote attackers to exploit the vulnerability via unknown vectors.

What is CRLF injection in the context of CVE-2016-3118?

CRLF injection refers to the ability to inject carriage return and line feed characters into an HTTP response, potentially leading to security issues.

Vulnerability/
CVE-2016-3118

medium

6.5

CWE

6/4/2016

5/8/2024

CVE-2016-3118: CRLF Injection

First published: Wed Apr 06 2016(Updated: )

CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Broadcom API Gateway	=7.1
Broadcom API Gateway	=8.0
Broadcom API Gateway	=8.1
Broadcom API Gateway	=8.2
Broadcom API Gateway	=8.3
Broadcom API Gateway	=8.4

Never miss a vulnerability like this again

Reference Links

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx

Frequently Asked Questions

What is the severity of CVE-2016-3118?
CVE-2016-3118 has been classified as a CRLF injection vulnerability, which can lead to unspecified impacts when exploited.
How do I fix CVE-2016-3118?
To mitigate CVE-2016-3118, update to versions 7.1.04, 8.3.01, or 8.4.01 of the CA API Gateway.
What products are affected by CVE-2016-3118?
CVE-2016-3118 affects CA API Gateway versions 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01.
Can CVE-2016-3118 be exploited remotely?
Yes, CVE-2016-3118 allows remote attackers to exploit the vulnerability via unknown vectors.
What is CRLF injection in the context of CVE-2016-3118?
CRLF injection refers to the ability to inject carriage return and line feed characters into an HTTP response, potentially leading to security issues.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/author
agent/references
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/broadcom
canonical/broadcom api gateway
version/broadcom api gateway/7.1
version/broadcom api gateway/8.0
version/broadcom api gateway/8.1
version/broadcom api gateway/8.2
version/broadcom api gateway/8.3
version/broadcom api gateway/8.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.