MitreCVELIST:CVE-2011-1718

HistoryApr 27, 2011 - 12:00 a.m.

CVE-2011-1718

2011-04-2700:00:00

mitre

www.cve.org

web agents

ca siteminder

multi-line headers

impersonation attacks

privilege escalation

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

75.5%

JSON

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

References

secunia.com/advisories/44218

securityreason.com/securityalert/8227

securitytracker.com/id?1025423

www.securityfocus.com/archive/1/517626/100/0/threaded

www.securityfocus.com/bid/47520

www.vupen.com/english/advisories/2011/1067

exchange.xforce.ibmcloud.com/vulnerabilities/66906

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B1BF29B14-C5FB-4BD3-9113-68E2426E4381%7D