CVE-2013-2279

Related Files

Security Notice For SiteMinder Products Using SAML

Posted Mar 20, 2013

Authored by Kevin Kotas | Site www3.ca.com

CA Technologies support is alerting customers to a potential risk with certain CA SiteMinder products that implement Security Assertion Markup Language (SAML). Multiple vulnerabilities exist that can possibly allow a remote attacker to gain additional privileges. The vulnerabilities concern the verification of XML signatures on SAML statements. An attacker can perform various attacks to impersonate another user in the single sign-on system.

tags | advisory, remote, vulnerability

advisories | CVE-2013-2279

SHA-256 | 0a14a948ab88ea32cc65eec67d7baeacc0cfda2caa0d678240891bf18319d013

Download | Favorite | View