CVE-2012-4604

2022-10-0316:15:34

mitre

www.cve.org

triton management

authentication bypass

arbitrary reports

websense web security

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.

References

www.securityfocus.com/archive/1/522530