| Package | Affected versions | Patched versions |
|---|---|---|
| siteminder | = 12.0 | |
| siteminder | = 6 |
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free