Cross-Site Scripting Vulnerability in Microsoft Forefront Threat Management Gateway and ISA Server

CVE-2009-0237

Summary

The vulnerability arises from improper validation in the cookieauth.dll component of the HTML forms authentication in Microsoft Forefront Threat Management Gateway and ISA Server 2006. This flaw allows remote attackers to inject malicious web scripts or HTML into authentication inputs, which can compromise the security of the affected systems and potentially expose sensitive user data. Attackers exploiting this vulnerability could take advantage of code execution possibilities to manipulate user session data, making it essential for organizations to apply the necessary patches and implement security measures to mitigate risks.

References