CVE-2015-6853 The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remot...
CriticalCVSS 9.1
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom single sign-on | = r6.0 | No fix listed |
| broadcom single sign-on | = r12.0 | No fix listed |
| broadcom single sign-on | = r12.0j | No fix listed |
| broadcom single sign-on | = r12.5 | No fix listed |
| broadcom single sign-on | = r12.51 | No fix listed |
| broadcom single sign-on | = r12.52 | No fix listed |
References
- www.ca.com vendor-advisory
- 1035389 vdb-entry