The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-04-27T00:00:00

Updated: 2024-08-06T22:37:25.763Z

Reserved: 2011-04-18T00:00:00

Link: CVE-2011-1718

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-04-27T01:25:33.650

Modified: 2023-11-07T02:07:04.843

Link: CVE-2011-1718

cve-icon Redhat

No data.