CoreCVE
Back

MEDIUM

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers

Published Mar 7, 2006

Description

SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (7)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 7, 2006
Updated Aug 7, 2024
Reserved Mar 7, 2006
Link CVE-2006-1039
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2006-1039
Red Hat
Severity n/a
Public date n/a
Links CVE-2006-1039
ENISA EUVD
Assigner mitre
Published Mar 7, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-1043
EUVD-2006-1043