Vulnerability Database

308,820

Total vulnerabilities in the database

CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

  • Published: Apr 27, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-1718
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
ca / siteminder 6-sp5_cr35 6-sp5_cr35.x
broadcom / siteminder 12.0-sp3 12.0-sp3.x