PT-2011-3395

Name of the Vulnerable Software and Affected Versions CA Arcot WebFort Versatile Authentication Server VAS versions prior to 6.2.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Administrative Console. These vulnerabilities allow remote attackers to inject...

CVE-2011-1825: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1826: Improper Input Validation

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2011-3396

Name of the Vulnerable Software and Affected Versions CA Arcot WebFort Versatile Authentication Server VAS versions prior to 6.2.5 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For versions prior to 6.2.5, upda...

CA20110426-01: Security Notice for CA Arcot WebFort Versatile Authentication Server

-----BEGIN PGP SIGNED MESSAGE----- CA20110426-01: Security Notice for CA Arcot WebFort Versatile Authentication Server Issued: April 26, 2011 CA Technologies support is alerting customers to multiple security risks with CA Arcot WebFort Versatile Authentication Server. Two vulnerabilities exist...