CVE-2021-29872 is a vulnerability in IBM Cloud Pak For Automation
Published on January 18, 2022
IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 206228.
Products Associated with CVE-2021-29872
Want to know whenever a new CVE is published for IBM Cloud Pak For Automation? stack.watch will email you.
Affected Versions
IBM Cloud Pak for Automation:- Version 21.0.1 is affected.
- Version 21.0.2 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.