Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2008-4283 Details

Description

CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://exchange.xforce.ibmcloud.com/vulnerabilities/47199 CVE
http://www-1.ibm.com/support/docview.wss?uid=isg1SE35864 CVEVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1PK69929 CVE
http://www.securityfocus.com/bid/33700 CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/47199 [email protected]

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]

Affected Products

ProductVersions
ibm websphere application server
<= 5.1.1.19
5.0
5.0.0
5.0.1
5.0.2

CPE

  • cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0:*:z_os:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2008-4283
NVD Published Date:
Feb 10, 2009
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2008-4283 Details - Not Deferred