PT-2000-1773 · Netegrity · Netegrity Siteminder

Publicado 2000-11-14 · Atualizado 2017-10-10 · CVE-2000-0850

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netegrity SiteMinder versions prior to 4.11

Description The issue allows remote attackers to bypass the authentication mechanism. This can be achieved by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.

Recommendations For versions prior to 4.11, update to version 4.11 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2000-0850

Produtos afetados

Netegrity Siteminder

Referências · 4

• http://securityfocus.com/bid/1681 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5230 · Nota
• http://atstake.com/research/advisories/2000/a091100-1.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0850 · Nota de Segurança