Security Advisory

CVE-2003-1311

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-12-15 19:00:00

Last updated 2024-08-08 02:19:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.

← Browse all CVEs View on cve.org ↗