Release Notes › Federation Security Services Release Notes › Fixes in r12 SP1 and SP2 › Authentication URL Open to Malicious Attacks (74278, 76976, 83114, 83117)

Authentication URL Open to Malicious Attacks (74278, 76976, 83114, 83117)

Symptom:

The SMPORTAL query parameter in the Authentication URL is subject to malicious modification when a user is redirected to be authenticated and establish a SiteMinder session.

STAR Issue: 17429022-01

Solution:

The SMPORTAL query parameter can now be encrypted to prevent malicious attacks by using the new Use Secure URL feature. For details about this feature, see the Federation Security Services Guide.