CVE-2015-6854

Published: Mar 24, 2016Modified: May 6, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.

Affected (4)

Products: Broadcom: Single Sign On

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Single Sign On	Version r12.0
Broadcom Single Sign On	Version r12.0j
Broadcom Single Sign On	Version r12.5
Broadcom Single Sign On	Version r6.0

Related CWEs

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (4)

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1035389

Source: cve@mitre.org

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035389

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.