383
VMScore

CVE-2016-6484

Published: 23/01/2017 Updated: 09/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

CRLF injection vulnerability in Infoblox Network Automation NetMRI prior to 7.1.1 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

infoblox netmri

Exploits

Infoblox versions 701 and below suffer from CRLF injection attacks that allow for HTTP response splitting ...