CVE-2003-1311 in SiteMinder

Summary

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/15/2006
• Disclosure: 12/31/2003
• Moderation: VulDB entry created
• Entries: VDB-21239 (1)
• CPE: ready
• CWE: CWE-601 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01146
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1311
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1311
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1311/