Lucene search

[email protected]NVD:CVE-2012-4604

HistoryAug 23, 2012 - 10:32 a.m.

CVE-2012-4604

2012-08-2310:32:15

CWE-287

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.

Affected configurations

NVD

Node

websensewebsense_web_securityRange≤7.6

websensewebsense_web_securityMatch6.3.0

websensewebsense_web_securityMatch6.3.1

websensewebsense_web_securityMatch6.3.2

websensewebsense_web_securityMatch6.3.3

websensewebsense_web_securityMatch7.0

websensewebsense_web_securityMatch7.1

websensewebsense_web_securityMatch7.1.1

websensewebsense_web_securityMatch7.5

websensewebsense_web_securityMatch7.5.1

References

www.securityfocus.com/archive/1/522530

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

Related for NVD:CVE-2012-4604

cve1 cvelist1 prion1