Denial of Service and Information Disclosure Vulnerability in CA Single Sign-On Domino Web Agent

Denial of Service and Information Disclosure Vulnerability in CA Single Sign-On Domino Web Agent

CVE-2015-6853 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:P

The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.

Learn more about our Web App Pen Testing.