Detections
Analytics
MS10-089: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Elevation of Privilege (2316074)
medium Nessus Plugin ID 50530
Language:
Synopsis
An application on the remote host has multiple vulnerabilitiesDescription
The version of Forefront Unified Access Gateway (UAG) running on the remote host has multiple vulnerabilities :- An unspecified redirection spoofing vulnerability, which could result in users being redirected from the UAG server to a similar looking, malicious server. (CVE-2010-2732)
- An unspecified non-persistent XSS in UAG.
(CVE-2010-2733)
- An unspecified non-persistent XSS in the UAG Mobile Portal Website. (CVE-2010-2734)
- An unspecified non-persistent XSS in Signurl.asp.
(CVE-2010-3936)
Solution
Microsoft has released a set of patches for UAG 2010, UAG 2010 Update 1, and UAG 2010 Update 2.See Also
Plugin Details
Severity: Medium
ID: 50530
File Name: smb_nt_ms10-089.nasl
Version: 1.19
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 11/9/2010
Updated: 8/5/2020
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.7
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:microsoft:forefront_unified_access_gateway
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 11/9/2010
Vulnerability Publication Date: 11/9/2010
Reference Information
CVE: CVE-2010-2732, CVE-2010-2733, CVE-2010-2734, CVE-2010-3936