CVE-2013-2279

Published: Mar 21, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges.

Affected (9)

Products: Siteminder Agent For Sharepoint: 2010 · Siteminder Federation: 12.0, 12.1, 12.5, R6.0 · Siteminder For Secure Proxy Server: 12.0, 12.5, 6.0

Siteminder Agent For Sharepoint

1 product

2010

Siteminder Federation

4 products

Siteminder For Secure Proxy Server

3 products

12.0

12.5

6.0

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Siteminder Agent For Sharepoint 2010	All versions
Siteminder Federation 12.0	All versions
Siteminder Federation 12.0	All versions
Siteminder Federation 12.1	All versions
Siteminder Federation 12.5	All versions
Siteminder Federation R6.0	All versions
Siteminder For Secure Proxy Server 12.0	All versions
Siteminder For Secure Proxy Server 12.5	All versions
Siteminder For Secure Proxy Server 6.0	All versions