NetSight
IP …
medium5.0

CVE-2015-2748

Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information …

Impact

Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Security incident report or the (2) Explorer configuration (websense.ini) file.

Affected products

VendorProductAffected versions
WebsenseTriton Ap Data
through 7.8.3
WebsenseTriton Ap Email
through 7.8.3
WebsenseTriton Ap Web
through 7.8.3
WebsenseV-Series Appliances
through 7.7

Weakness classification

CWE-200

References