CVE-2011-2012: Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly v...

Security readout for executives and security teams

CVE-2011-2012 is an availability flaw in Microsoft Forefront UAG 2010. A remote attacker could cause an IIS outage by triggering improper session-cookie handling. The business concern is disruption of access-gateway services, not data theft based on the supplied sources. Exposure is most likely where Microsoft Forefront UAG 2010 Gold, Update 1, Update 2, or SP1 remains deployed, especially if reachable from untrusted networks. Treat this as a service-availability risk for legacy access infrastructure. Prioritize remediation if UAG protects remote access, partner access, or other business-critical entry points. Mitigation focus: Identify all Forefront UAG 2010 deployments and versions.; Apply the Microsoft MS11-079 security update or current vendor guidance.; Reduce untrusted network exposure to UAG services where feasible..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.