What’s Vulnerable › Vulnerabilities

CVE-2013-2279

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-03-21 · updated 2026-06-16
• Weakness: CWE-20

Description

CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.

Affected products

• Siteminder Agent For Sharepoint 2010: all versions
• Siteminder Federation 12.0: all versions
• Siteminder Federation 12.1: all versions
• Siteminder Federation 12.5: all versions
• Siteminder Federation R6.0: all versions
• Siteminder For Secure Proxy Server 12.0: all versions
• Siteminder For Secure Proxy Server 12.5: all versions
• Siteminder For Secure Proxy Server 6.0: all versions

References

• http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html
• http://secunia.com/advisories/52610
• http://www.securityfocus.com/bid/58609
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53E50CBD-6F6A-4B3A-85FF-36E44ABED8D5%7D
• http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html
• http://secunia.com/advisories/52610
• http://www.securityfocus.com/bid/58609
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53E50CBD-6F6A-4B3A-85FF-36E44ABED8D5%7D

Get alerted when CVE-2013-2279 or the next vulnerability affects your stack