CVE-2023-26788

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks

Medium · published April 10, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Published
2023-04-10T00:00Z
EPSS history
Timeline
  • 10 APR 00:00Z
    Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks
    cvelistv5