CVE-2021-28979
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability in SafeNet KeySecure Management Console 8.12.0 allows HTTP response splitting attacks. A remote attacker can exploit a specially crafted URL to cause the server to return a split response when the URL is clicked.
Risk Assessment
An attacker can inject malicious content into HTTP responses, potentially leading to cross-site scripting (XSS) or redirect attacks, compromising data confidentiality and integrity within the organization.
Recommendation
Immediately upgrade SafeNet KeySecure to a version later than 8.12.0 that includes a fix for the HTTP response splitting vulnerability.
Original NVD description (English source)
SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked.