Published: 05/12/2012 Updated: 26/02/2013

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

VMScore: 585

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device prior to 7.0 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
forescout counteract 6.3.4.10

source: wwwsecurityfocuscom/bid/56687/info Forescout CounterACT is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input A successful exploit may aid in phishing attacks; other attacks are possible Forescout CounterACT 6341 is vulnerable; other versions may also be affecte ...

Forescout NAC (Network Access Control) version 6341 suffers from ICMP and ARP protocols not being filtered, cross site scripting, and cross site redirection vulnerabilities ...

CWE-20 http://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html http://www.securityfocus.com/bid/56687 https://nvd.nist.gov https://www.exploit-db.com/exploits/38062/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-4982

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect