IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the malicious user to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 153385.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm cloud private 3.1.0 |
||
ibm cloud private 3.1.1 |