CVE-2016-3118

Published: Apr 6, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors.

Affected (6)

Products: Broadcom: Api Gateway

Broadcom

1 product

Api Gateway

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Broadcom Api Gateway	Version 7.1
Broadcom Api Gateway	Version 8.0
Broadcom Api Gateway	Version 8.1
Broadcom Api Gateway	Version 8.2
Broadcom Api Gateway	Version 8.3
Broadcom Api Gateway	Version 8.4

References (2)

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx

Source: cve@mitre.org

Vendor Advisory

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.