Exposures › CVE-2011-1889

CVE-2011-1889

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-03-03
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Players implicated

Microsoft · vendorForefront Threat Management Gateway (TMG) · product

Description

A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Affected FedRAMP products 4 in the catalog

ProductProviderStatusMatch
Azure Commercial Cloud Microsoft Authorized vendor-exact · 0.90
Azure Government (includes Dynamics 365) Microsoft Authorized vendor-exact · 0.90
Microsoft Office 365 GCC High Microsoft In Process vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services Microsoft Authorized vendor-exact · 0.90