The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-04-27T00:00:00
Updated: 2024-08-06T22:37:25.763Z
Reserved: 2011-04-18T00:00:00
Link: CVE-2011-1718
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-04-27T01:25:33.650
Modified: 2023-11-07T02:07:04.843
Link: CVE-2011-1718
Redhat
No data.