Unscored CVE-2000-0850 EUVD-2000-0837GHSA-5vj6-cjv9-5x62

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is…

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.

References

A091100-1 vendor-advisory
siteminder-bypass-authentication(5230) vdb-entry
1681 vdb-entry