CVE-2020-3117: cisco cisco web security appliance (wsa) HTTP Request/Response Splitting

Vulnerability summary

CVE-2020-3117 is a medium (CVSS 4.7) HTTP Request/Response Splitting vulnerability in cisco cisco web security appliance (wsa). EPSS estimates a 0.93% chance of exploitation in the next 30 days, higher than 59.9% of scored vulnerabilities.

Timeline

1. 23-09-2020
   PublishedVulnerability first disclosed.
2. 13-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to inject crafted HTTP headers in the web server's response. The vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user to access a crafted URL and receive a malicious HTTP response. A successful exploit could allow the attacker to inject arbitrary HTTP headers into valid HTTP responses sent to a user's browser.

• CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.