[Bug 1095721] CVE-2018-11652: CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackersto inject arbitrary OS commands via the Server field in an HTTP response header,which is directly injected into a CSV report.

4 Jun 2018

      http://bugzilla.suse.com/show_bug.cgi?id=1095721

SMASH SMASH <smash_bz@suse.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|                            |
                   |                            |CVSSv3:RedHat:CVE-2018-1165
                   |                            |2:8.1:(AV:N/AC:H/PR:N/UI:N/
                   |                            |S:U/C:H/I:H/A:H)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠novell.com

tags

participants (1)