Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Tivoli Application Dependency Discovery Manager HOST header injection
Vulnerability Description
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 270270.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对HTTP头部进行脚本语法转义处理不恰当
Vulnerability Title
IBM Tivoli Application Dependency Discovery Manager 安全漏洞
Vulnerability Description
IBM Tivoli Application Dependency Discovery Manager（TADDM）是美国国际商业机器（IBM）公司的一套IT服务管理解决方案中的产品。该产品提供了健全的自动化应用程序映射和发现，帮助管理员了解业务应用程序的结构、状态、配置和变更历史记录。 IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 版本到 7.3.0.10 版本存在安全漏洞，该漏洞源于 HOST 标头对输入的验证不正确。
CVSS Information
N/A
Vulnerability Type
N/A