The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:07
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
12 Apr 2021, 14:17
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:broadcom:siteminder:12.0:sp3:cr01:*:*:*:*:* |
Information
Published : 2011-04-27 01:25
Updated : 2023-12-10 11:03
NVD link : CVE-2011-1718
Mitre link : CVE-2011-1718
CVE.ORG link : CVE-2011-1718
JSON object : View
Products Affected
ca
- siteminder
broadcom
- siteminder
CWE
CWE-20
Improper Input Validation