CVE-2011-1718: Broadcom Siteminder

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.

Affected products

• Broadcom Siteminder: version 12.0 only
• Ca Siteminder: version 6 only

Published 2011-04-27. Last modified 2026-06-16.