Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction

Discussion in 'News Aggregator' started by Packet Storm, 3 Jul 2018.

  1. Packet Storm

    Packet Storm Guest

    Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.

    Continue reading...
     

Share This Page

Loading...