PT-2011-3318 · Ca · Ca Siteminder

Publicado 2011-04-27 · Atualizado 2021-04-12 · CVE-2011-1718

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA SiteMinder R6 versions prior to SP6 CR2 CA SiteMinder R12 versions prior to SP3 CR2

Description The issue is related to the Web Agents component, which does not properly handle multi-line headers. This allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

Recommendations For CA SiteMinder R6 versions prior to SP6 CR2, update to SP6 CR2 or later to resolve the issue. For CA SiteMinder R12 versions prior to SP3 CR2, update to SP3 CR2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1718

Produtos afetados

Ca Siteminder

Referências · 10

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1718 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1718 · Nota de Segurança
• http://securitytracker.com/id?1025423 · Nota
• http://securityreason.com/securityalert/8227 · Nota
• http://vupen.com/english/advisories/2011/1067 · Aviso do Fabricante
• http://securityfocus.com/archive/1/517626/100/0/threaded · Nota
• http://secunia.com/advisories/44218 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66906 · Nota
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B1BF29B14-C5FB-4BD3-9113-68E2426E4381%7D · Nota
• http://securityfocus.com/bid/47520 · Nota