CVE-2015-6853

Published: Mar 24, 2016Modified: May 6, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.

Affected (6)

Products: Broadcom: Single Sign On

Broadcom

1 product

Single Sign On

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Broadcom Single Sign On	Version r12.0
Broadcom Single Sign On	Version r12.0j
Broadcom Single Sign On	Version r12.51
Broadcom Single Sign On	Version r12.52
Broadcom Single Sign On	Version r12.5
Broadcom Single Sign On	Version r6.0

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (4)

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1035389

Source: cve@mitre.org

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035389

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.