CVE-2011-1826: Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Serv...

Security readout for executives and security teams

CVE-2011-1826 is an open redirect in the CA Arcot WebFort Versatile Authentication Server Administrative Console before 6.2.5. An attacker could misuse the console as a trusted-looking jump point to send users to another website, supporting phishing rather than direct system takeover. Exposure is likely limited to organizations still running CA Arcot WebFort VAS before 6.2.5, especially where the Administrative Console is reachable by administrators, internal users, or the internet. Treat this as a moderate phishing-enablement issue for legacy authentication infrastructure. Prioritize remediation if the product is still deployed, internet reachable, or used by privileged administrators. Mitigation focus: Upgrade CA Arcot WebFort VAS to 6.2.5 or later.; Review the CA security notice for product-specific remediation guidance.; Restrict Administrative Console access to trusted networks and administrators..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.