CVE-2015-6853

Critical

Published: 24/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Domino web agent in CA Single Sign-On (SSO) before certain versions allows remote attackers to cause a denial of service or obtain sensitive information via a crafted request.

Risk Assessment

Attackers can cause service outages, impacting application availability and data security within the organization.

Recommendation

It is recommended to update to the latest version of CA Single Sign-On to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request.