NVD

Id
38355  
Name
CVE-2013-2279  
Description
CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-21  
Modified Date
2013-03-22  
Seq
2013-2279  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196137 38355 CVE-2013-2279 20130319 CA20130319-01: Security Notice for SiteMinder products using SAML  View
196138 38355 CVE-2013-2279 58609  View
196139 38355 CVE-2013-2279 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={53E50CBD-6F6A-4B3A-85FF-36E44ABED8D5}  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20417 JVNDB-2013-001992 複数の CA SiteMinder 製品における他のユーザを偽装される脆弱性 CA SiteMinder Federation (FSS/Standalone)、Agent for SharePoint および SiteMinder for Secure Proxy Server は、SAML ステートメント用の XML 署名を適切に検証しないため、他のユーザに偽装される、および権限を取得される脆弱性が存在します。 CVE-2013-2279 62221 CVE-2013-2279 38355 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001992.html 2013-03-19 2013-03-25 View