Description

A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.

Remediation

References

CVE-2017-1000016

Related Vulnerabilities

Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15811)

Apache 2.x version equal to 2.0.51

WordPress Plugin Seatgeek Affiliate Tickets Cross-Site Scripting (1.0.2)

WordPress Plugin Admin renamer extended Cross-Site Scripting (3.2)

Oracle Application Server Other Vulnerability (CVE-2002-0569)

Severity

High

Classification

CVE-2017-1000016 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities