The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:07
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2011-04-27 01:25
Updated : 2024-02-28 11:41
NVD link : CVE-2011-1718
Mitre link : CVE-2011-1718
CVE.ORG link : CVE-2011-1718
JSON object : View
Products Affected
ca
- siteminder
broadcom
- siteminder
CWE
CWE-20
Improper Input Validation