CVE-2014-3026 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2014-3026

Deferred

More Info Official Page

Source-psirt@us.ibm.com

Published At-29 Jul, 2014 | 20:55

Updated At-12 Apr, 2025 | 10:46

CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

IBM Corporation

>>maximo_asset_management>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.2:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.0

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.1

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.2

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.3

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.4

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.4:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.5

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_industry_solutions>>7.5.0.6

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Evaluator Description

CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')

References

Hyperlink	Source	Resource
http://secunia.com/advisories/59570	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21678798	psirt@us.ibm.com	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93065	psirt@us.ibm.com	N/A
http://secunia.com/advisories/59570	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21678798	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93065	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/59570

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21678798

Source: psirt@us.ibm.com

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/93065

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/59570

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21678798

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/93065

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A