6.8 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.5%
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
marc.info/?l=bugtraq&m=103359690824103&w=2
www.iss.net/security_center/static/10247.php
www.osvdb.org/3491
www.westpoint.ltd.uk/advisories/wp-02-0005.txt