CVE-2012-0146

2012-04-1021:55:01

CWE-20

microsoft

web.nvd.nist.gov

cve-2012-0146

open redirect vulnerability

microsoft forefront

unified access gateway

uag

2010 sp1

phishing

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.009

Percentile

82.4%

JSON

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka “UAG Blind HTTP Redirect Vulnerability.”

Affected configurations

Nvd

Node

microsoftforefront_unified_access_gatewayMatch2010sp1

microsoftforefront_unified_access_gatewayMatch2010sp1_update1

VendorProductVersionCPE
microsoftforefront_unified_access_gateway2010cpe:2.3:a:microsoft:forefront_unified_access_gateway:2010:sp1:*:*:*:*:*:*
microsoftforefront_unified_access_gateway2010cpe:2.3:a:microsoft:forefront_unified_access_gateway:2010:sp1_update1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	forefront_unified_access_gateway	2010	cpe:2.3:a:microsoft:forefront_unified_access_gateway:2010:sp1::::::
microsoft	forefront_unified_access_gateway	2010	cpe:2.3:a:microsoft:forefront_unified_access_gateway:2010:sp1_update1::::::