.. / CVE-2012-4982

Exploit for Forescout CounterACT 6.3.4.1 - Open Redirect (CVE-2012-4982)

Description:

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ‘a’ parameter.

Nuclei Template

View the template here CVE-2012-4982.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2012/CVE-2012-4982.yaml
Copy

References:

http://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html
https://www.exploit-db.com/exploits/38062
https://github.com/tr3ss/newclei
https://www.reactionpenetrationtesting.co.uk/forescout-cross-site-redirection.html
https://nvd.nist.gov/vuln/detail/CVE-2012-4982