Lucene search
HistoryApr 26, 2006 - 12:06 a.m.
CVE-2006-2035
websense
access permisson
url bypass
local users
uncategorized category
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a “/?” sequence to a URL.
Affected configurations
Node
websensewebsense
| CPE | Name | Operator | Version |
|---|---|---|---|
| websense:websense | websense | eq | * |
Related
nvd
nvd
CVE-2006-2035
2006-04-26 00:06:00
prion
prion
Design/Logic Flaw
2006-04-26 00:06:00
cvelist
cvelist
CVE-2006-2035
2006-04-26 00:00:00
f5
f5
K000139692: Websense vulnerabilities CVE-2006-2035 and CVE-2010-5144
2024-05-20 00:00:00
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-2035