Multiple Websense Product 'explorer_wse' Path Access Bypass Vulnerabilities

Websense, Inc. NASDAQ: WBSN is the world's leading provider of integrated Web, information and data security protection solutions. Multiple Websense products are vulnerable to an "explorerwse" path access bypass vulnerability. This vulnerability allows attackers to bypass certain security...

CVE-2015-2748: Exposure of Sensitive Information to an Unauthorized Actor

Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorerwse/, which allows remote attackers to obtain sensitive information via a direct request to a 1 Web Security incident report or the 2 Explorer configuration websense.ini file...

CVE-2012-4604: Improper Authentication

The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorerwse/favorites.exe...