← Database

CVE-2009-1357

MEDIUM CVSS: 6.8 Published: 2009-04-23 Modified: 2026-06-16

Description

CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.

Affected Platforms

Sun Java System Delegated Administrator

Weakness Type

CWE-20

References