Skip to content
fr Sign in
4.7 Medium

CVE-2020-3246 A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to perform a…

Description

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to perform a carriage return line feed (CRLF) injection attack against a user of an affected service. The vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user to access a crafted URL. A successful exploit could allow the attacker to inject arbitrary HTTP headers into valid HTTP responses sent to the browser of the user.

Affected products and versions

Product Affected versions Fixed in
Cisco Umbrella Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Umbrella

The 7 CVEs of Cisco Umbrella →
CVE-2020-3337 A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user… 4.7 Medium CVE-2019-1807 A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an… 7.6 High CVE-2019-1792 A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a… 6.1 Medium CVE-2018-0435 A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across… Not rated
Track this CVE