CVE-2003-1311

EUVD-2003-1301 · Published Dec 31, 2003

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.

Technologies

Netegrity Siteminder

Weaknesses

NVD-CWE-Other

CVSS scores

v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://curl.haxx.se/mail/archive-2003-05/0172.html
http://www.osvdb.org/30741

Potentially impacted assets

See if this affects your attack surface