PT-2005-5196 · Webwasher · Webwasher Csm Appliance Suite

V0Rt3X · Publicado 2005-12-23 · Atualizado 2024-08-08 · CVE-2005-4514

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webwasher CSM Appliance Suite version 5.x

Description The encapsulation script mechanism in the affected software uses case-sensitive detection of malicious tokens. This allows attackers to bypass script detection by using tokens that can be either upper or lower case.

Recommendations For Webwasher CSM Appliance Suite version 5.x, consider implementing case-insensitive detection of malicious tokens as a mitigation measure until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4514

Produtos afetados

Webwasher Csm Appliance Suite

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-4514 · Nota de Segurança
• http://securityreason.com/securityalert/293 · Nota
• http://securityfocus.com/archive/1/420106/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23884 · Nota
• http://securityfocus.com/archive/1/420678/100/0/threaded · Nota
• http://securityfocus.com/bid/16047 · Nota
• http://securityfocus.com/archive/1/420158/100/0/threaded · Nota