Quest Coexistence Manager for Notes HTTP Request Smuggling Vulnerability

A vulnerability allowing HTTP request smuggling has been identified in Quest Coexistence Manager for Notes, specifically in the Free/Busy Connector modules, version 3.8.2045. This vulnerability arises from an inconsistent interpretation of HTTP requests, allowing attackers to exploit the Content-Length-Transfer-Encoding (CL.TE) attack vector. The exploitation of this vulnerability could enable attackers to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests.

Impact

Exploitation of this vulnerability could lead to HTTP request smuggling, allowing attackers to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests.