Design/Logic Flaw

2012-08-2310:32:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.5%

JSON

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.

CPENameOperatorVersion
websensele6.3.3
websenseeq6.3.1 enterprise
websenseeq6.3.0 enterprise
websense_web_filtereq6.3.1
websense_web_filtereq6.3.0
websense_web_filterle6.3.3
websense_web_securityeq6.3.3
websense_web_securityeq6.3.1
websense_web_securityeq6.3.0

Name	Operator	Version
websense	le	6.3.3
websense	eq	6.3.1 enterprise
websense	eq	6.3.0 enterprise
websense_web_filter	eq	6.3.1
websense_web_filter	eq	6.3.0
websense_web_filter	le	6.3.3
websense_web_security	eq	6.3.3
websense_web_security	eq	6.3.1
websense_web_security	eq	6.3.0