medium4.3
CVE-2012-4604
The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a c…
Impact
The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Websense | Websense Web Security | through 7.6 Versions 6.3.0, 6.3.1, 6.3.2, 6.3.3, 7.0 |