2023-06-11 05:18:56 +00:00
id : CVE-2012-4982
2023-07-11 19:49:27 +00:00
2023-06-11 05:18:56 +00:00
info :
name : Forescout CounterACT 6.3.4.1 - Open Redirect
author : ctflearner
severity : medium
2023-06-12 09:48:19 +00:00
description : |
2023-06-12 09:43:39 +00:00
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 'a' parameter.
2023-06-11 05:18:56 +00:00
reference :
- https://www.exploit-db.com/exploits/38062
2023-06-12 09:48:19 +00:00
- https://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html
2023-06-11 05:18:56 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2012-4982
2023-07-11 19:49:27 +00:00
- http://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html
2023-06-11 05:18:56 +00:00
classification :
2023-07-11 19:49:27 +00:00
cvss-metrics : CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N
2023-06-11 05:18:56 +00:00
cvss-score : 5.8
cve-id : CVE-2012-4982
cwe-id : CWE-20
2023-07-11 19:49:27 +00:00
epss-score : 0.00748
2023-06-11 05:18:56 +00:00
cpe : cpe:2.3:a:forescout:counteract:6.3.4.10:*:*:*:*:*:*:*
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : forescout
product : counteract
2023-06-12 09:43:39 +00:00
tags : cve,cve2012,redirect,forescout,counteract
2023-06-11 05:18:56 +00:00
http :
- method : GET
path :
2023-06-12 09:43:39 +00:00
- "{{BaseURL}}/assets/login?a=https://interact.sh"
2023-06-11 05:18:56 +00:00
matchers :
- type : regex
part : header
regex :
2023-06-12 09:43:39 +00:00
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'