CVE-2011-1826: Ca Arcot Webfort Versatile Authentication Server

Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

• Ca Arcot Webfort Versatile Authentication Server: up to and including 6.2.4

Published 2011-05-05. Last modified 2026-06-16.