What’s Vulnerable › Vulnerabilities

CVE-2011-1718

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-04-27 · updated 2026-06-16
• Weakness: CWE-20

Description

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

Affected products

• Broadcom Siteminder: 12.0-sp3
• Ca Siteminder: 6-sp5_cr35

References

• http://secunia.com/advisories/44218
• http://securityreason.com/securityalert/8227
• http://securitytracker.com/id?1025423
• http://www.securityfocus.com/archive/1/517626/100/0/threaded
• http://www.securityfocus.com/bid/47520
• http://www.vupen.com/english/advisories/2011/1067
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66906
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B1BF29B14-C5FB-4BD3-9113-68E2426E4381%7D
• http://secunia.com/advisories/44218
• http://securityreason.com/securityalert/8227
• http://securitytracker.com/id?1025423
• http://www.securityfocus.com/archive/1/517626/100/0/threaded

Get alerted when CVE-2011-1718 or the next vulnerability affects your stack