Computer Associates SiteMinder Unicode Cross-Site Scripting Protection Security Bypass Vulnerability

ID EDB-ID:33181
Type exploitdb
Reporter Arshan Dabirsiaghi
Modified 2009-06-08T00:00:00


Computer Associates SiteMinder Unicode Cross Site Scripting Protection Security Bypass Vulnerability. CVE-2009-2705. Webapps exploit for java platform


Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in further attacks.

We don't know which versions of SiteMinder are affected. We will update this BID when more details become available.