CVEvulnerability

CVE-2013-2279

7.5 HIGH Published 2013-03-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.

Affected configurations

• siteminder agent for sharepoint 2010 • siteminder federation 12.0 • siteminder federation 12.1 • siteminder federation 12.5 • siteminder federation r6.0 • siteminder for secure proxy server 12.0 • siteminder for secure proxy server 12.5 • siteminder for secure proxy server 6.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References