PT-2015-4360 · Websense · Websense Triton V-Series

Publicado 2015-03-27 · Atualizado 2016-06-23 · CVE-2014-9712

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 7.8.3 Hotfix 03 Websense TRITON V-Series appliances versions prior to 7.8.4 Hotfix 01

Description The issue allows remote administrators to read arbitrary files and obtain passwords via a crafted path.

Recommendations For versions prior to 7.8.3 Hotfix 03, update to 7.8.3 Hotfix 03 or later. For versions prior to 7.8.4 Hotfix 01, update to 7.8.4 Hotfix 01 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-9712

Produtos afetados

Websense Triton V-Series

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-9712 · Nota de Segurança
• http://websense.com/support/article/kbarticle/v7-8-3-About-Hotfix-03-for-V-Series-Appliance · Aviso do Fabricante
• http://securityfocus.com/bid/73417 · Nota
• http://websense.com/support/article/kbarticle/v7-8-4-About-Hotfix-01-for-V-Series-Appliance · Aviso do Fabricante