CVE:CVE-2013-2279
CNNVD:CNNVD-201303-417
CA（Computer Associates） SiteMinder是美国CA公司的一套集中式Web访问控制管理系统。该系统对Web应用和门户提供了单点登录、认证管理、基于策略的授权等功能。
CA SiteMinder Federation (FSS) 12.5，12.0，r6版本；Federation (Standalone) 12.1和12.0版本；Agent for SharePoint 2010；SiteMinder for Secure Proxy Server 6.0，12.0，12.5版本中存在漏洞，该漏洞源于程序没有正确验证SAML声明的XML签名。远程攻击者利用该漏洞冒充其他用户进而获得特权。
solution:Upgrade siteminder_agent_for_sharepoint 2010 to a higher version than *; Upgrade siteminder_federation 12.0 to a higher version than *,-:standalone,and avoid the version -:standalone; Upgrade siteminder_federation 12.1 to a higher version than -:standalone,and avoid the version -:standalone; Upgrade siteminder_federation 12.5 to a higher version than *; Upgrade siteminder_federation r6.0 to a higher version than *; Upgrade siteminder_for_secure_proxy_server 12.0 to a higher version than *; Upgrade siteminder_for_secure_proxy_server 12.5 to a higher version than *; Upgrade siteminder_for_secure_proxy_server 6.0 to a higher version than *