medium4.3
CVE-2010-5144
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft IS…
Impact
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Websense | Websense | through 6.3.3 Versions 6.3.0, 6.3.1 |
| Websense | Websense Web Security | Versions 6.3.0, 6.3.1, 6.3.3 |
| Websense | Websense Web Filter | through 6.3.3 Versions 6.3.0, 6.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html
- http://mrhinkydink.blogspot.com/2010/05/websense-633-via-bypass.html
- http://www.websense.com/support/article/t-kbarticle/Web-Security-Vulnerability-Microsoft-ISA-Server-Integrations
- http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html
- http://mrhinkydink.blogspot.com/2010/05/websense-633-via-bypass.html
- http://www.websense.com/support/article/t-kbarticle/Web-Security-Vulnerability-Microsoft-ISA-Server-Integrations