CVE:CVE-2000-0850
CNNVD:CNNVD-200011-058
Netegrity SiteMinder 4.11之前的版本存在漏洞。远程攻击者可以通过向请求的URL附加“$/FILENAME.ext”绕过认证机制。
solution:Upgrade netegrity siteminder to a higher version than 3.6,4.0,and avoid the version 3.6,4.0