CVE-2016-3118

CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2016-04-06

Last modified

2024-08-05

Affected products

• Api Gateway (Broadcom)

References

• http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-secur…