Vulnerabilities > CVE-2003-1311 - Remote Security vulnerability in Netegrity SiteMinder
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL network
netegrity
Summary
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redirection resource, which allows remote attackers to construct a URL that might trick users into visiting an arbitrary web site referenced by this parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |