IQID:23425 HTTP Canon Oce Print Exec Workgroup 1.3.2 - Host Header Injection S

IQID: 23425 - August 2021

Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection. We have identified that the "OCE Print Exec Workgroup Version 1.3.2" web interface is affected by Host Header attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address. This is due to that the server implicitly trusts the Host header, and fails to validate or escape it properly, an attacker may be able to use this input to inject harmful payloads that manipulate server-side behavior.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.

 

External Resources

External resources are available for this threat, please sign in for access to external resources.