NVD

Id
8606  
Name
CVE-2011-1718  
Description
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-04-26  
Modified Date
2011-09-21  
Seq
2011-1718  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49631 8606 CVE-2011-1718 8227  View
49632 8606 CVE-2011-1718 1025423  View
49633 8606 CVE-2011-1718 20110421 CA20110420-01: Security Notice for CA SiteMinder  View
49634 8606 CVE-2011-1718 47520  View
49635 8606 CVE-2011-1718 ADV-2011-1067  View
49636 8606 CVE-2011-1718 siteminder-headers-spoofing(66906)  View
49637 8606 CVE-2011-1718 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={1BF29B14-C5FB-4BD3-9113-68E2426E4381}  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34271 JVNDB-2011-004513 CA SiteMinder の Web Agents コンポーネントにおけるなりすまし攻撃の脆弱性 CA SiteMinder の Web Agents コンポーネントは、複数行にわたるヘッダを適切に処理しないため、なりすまし攻撃を誘発する、および権限を取得される脆弱性が存在します。 CVE-2011-1718 49625 CVE-2011-1718 8606 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004513.html 2011-04-20 2012-03-27 View