CVE-2011-2012

Published: Oct 12, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."

Affected (4)

Products: Microsoft: Forefront Unified Access Gateway

Microsoft

1 product

Forefront Unified Access Gateway

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Forefront Unified Access Gateway	Version 2010
Microsoft Forefront Unified Access Gateway	Version 2010 sp1
Microsoft Forefront Unified Access Gateway	Version 2010 update1
Microsoft Forefront Unified Access Gateway	Version 2010 update2