CVE-2012-4982
NONE
Published Dec 5, 201213y ago · Modified Jun 16, 20262w ago
Published Dec 5, 2012 13y ago
Last Modified Jun 16, 2026 2w ago
Description
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| forescout | counteract | 6.3.4.10 | any |
References 2
- reactionpenetrationtesting.co.uk http://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html
- securityfocus.com http://www.securityfocus.com/bid/56687
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.