CVE-2010-2732

Published: Nov 10, 2010Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."

Affected (3)

Products: Microsoft: Forefront Unified Access Gateway

1 product

Forefront Unified Access Gateway

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Forefront Unified Access Gateway	Version 2010
Microsoft Forefront Unified Access Gateway	Version 2010 update1
Microsoft Forefront Unified Access Gateway	Version 2010 update2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.us-cert.gov/cas/techalerts/TA10-313A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12257

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA10-313A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12257

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.