CVE-2018-12571

概要

参考情報

• packetstormsecurity.com/files/148389/Microsoft-Forefront-Unified-Access-Gateway-2010-External-DNS-Interaction.html · Exploit
• seclists.org/fulldisclosure/2018/Jul/2 · Exploit
• seclists.org/fulldisclosure/2018/Jul/7 · Exploit
• securitytracker.com/id/1041212 · Third Party Advisory

forefront unified access gateway のその他の脆弱性

• CVE-2012-0147中 5.0Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows re…
• CVE-2012-0146中 5.8Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirec…
• CVE-2011-2012中 5.0Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which al…
• CVE-2011-1969緊急 9.3Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a s…
• CVE-2011-1897中 4.3Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows r…