Microsoft Forefront Unified Access Gateway (UAG) Unfiltered Access to UAG Default Website Vulnerability

Last Update Date: 11 Apr 2012 11:41 Release Date: 11 Apr 2012 5161 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability exists in Microsoft Unified Access Gateway (UAG) that could allow an unauthenticated user to access the default website of the Microsoft UAG server from the external network.

Impact

Information Disclosure

System / Technologies affected

Microsoft Forefront Unified Access Gateway 2010

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/ms12-026

Vulnerability Identifier

CVE-2012-0147

Source

Microsoft