Is Siteminder vulnerable to CVE-2004-0230

Products

• SITEMINDER

Issue/Introduction

 If Siteminder Access Gateway and/or Policy Server is vulnerable to CVE-2004-0230?

Both are installed on RHEL7

Resolution

This is network/OS level vulnnerability. And it's a very old CVE (recorded in 2004).

https://cve.mitre.org/cgi-bin/cvename.cgi?name=can-2004-0230

 

Siteminder products are not directly impacted.

 

Plesae double check with the OS vendor.

For RedHat, please refer to,

https://access.redhat.com/solutions/134743