The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2011-04-27T00:00:00
Updated: 2018-10-09T18:57:01
Reserved: 2011-04-18T00:00:00
Link: CVE-2011-1718
JSON object: View
NVD Information
Status : Modified
Published: 2011-04-27T01:25:33.650
Modified: 2023-11-07T02:07:04.843
Link: CVE-2011-1718
JSON object: View
Redhat Information
No data.
CWE