Vulnerability in CA Single Sign-On Web Agents Allows Denial of Service and Information Disclosure

Vulnerability in CA Single Sign-On Web Agents Allows Denial of Service and Information Disclosure

CVE-2015-6854 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:P

The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.

Learn more about our Web App Pen Testing.