CVE-2013-2279
No CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.
CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siteminder_agent_for_sharepoint:2010
- siteminder_federation:12.0
- siteminder_federation:12.1
- siteminder_federation:12.5
- siteminder_federation:r6.0
- siteminder_for_secure_proxy_server:12.0
- siteminder_for_secure_proxy_server:12.5
- siteminder_for_secure_proxy_server:6.0
References
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html
- http://secunia.com/advisories/52610
- http://www.securityfocus.com/bid/58609
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53E50CBD-6F6A-4B3A-85FF-36E44ABED8D5%7D
- http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html