|
|
|
|
| |
Credit:
|
| |
Vulnerable Systems:
* Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1
A spoofing vulnerability exists in Forefront Unified Access Gateway (UAG) that could lead to information disclosure. The vulnerability could allow spoofing by redirecting web traffic intended for the UAG server to a malicious website. To exploit the vulnerability, an attacker could send a link that has a specially crafted URL to a user of a UAG server, and convince the user to click the link. When an authenticated UAG user clicks the link, the authenticated user's browser session could be redirected to a malicious site that is designed to impersonate a legitimate UAG web interface. By doing so, the attacker could trick the user and potentially acquire sensitive information, such as the user's credentials
Vendor Status:
Microsoft had issued an update for this vulnerability
Patch Availability:
http://technet.microsoft.com/en-us/security/bulletin/ms12-026
CVE Information:
CVE-2012-0146
Disclosure Timeline:
Published: Tuesday, April 10, 2012
|
|
|
|
|
