A weakness and a vulnerability have been reported in Microsoft Forefront Unified Access Gateway, which can be exploited by malicious people to conduct spoofing attacks and disclose certain sensitive information.

1) A weakness in UAG allows redirecting users to an untrusted site e.g. spoofing a legitimate UAG Web interface.

2) An error within the default website configuration allows access to certain content from the external network.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
MS12-026 (KB2663860, KB2649261, KB2649262):
http://technet.microsoft.com/en-us/security/bulletin/ms12-026

Deep Links
Links available to Secunia VIM customers