CVE-2006-1039
Published Mar 7, 2006
Last updated 6 years ago
Overview
- Description
- SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.4
- Impact score
- 4.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-94
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE5FAC41-5C2B-4653-A757-ADBFD37E716E"
},
{
"criteria": "cpe:2.3:a:sap:sap_web_application_server:6.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A68E0969-971D-4D97-97EE-F901B05885DC"
},
{
"criteria": "cpe:2.3:a:sap:sap_web_application_server:6.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B41DF7D3-9EF1-4F5B-870E-5D1FDF095509"
}
],
"operator": "OR"
}
]
}
]