Vulnerability in Netegrity Siteminder
CVE-2003-1311
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.
EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.
Affected products
- Netegrity Siteminder
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)