Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka Unfiltered Access to UAG Default Website Vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Forefront_unified_access_gateway | Microsoft | 2010-sp1 (including) | 2010-sp1 (including) |
| Forefront_unified_access_gateway | Microsoft | 2010-sp1_update1 (including) | 2010-sp1_update1 (including) |