PT-2012-1285 · Websense+1 · Websense Web Filter+2

Published 2012-08-23 · Updated 2012-08-23 · CVE-2009-5120

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Websense Web Security versions 7.0 Websense Web Filter versions 7.0

Description The default configuration of Apache Tomcat in Websense Manager allows connections to TCP port 1812 from arbitrary source IP addresses. This makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via UTF-7 text to the 404 error page of a Project Woodstock service on this port.

Recommendations For Websense Web Security version 7.0, restrict access to TCP port 1812 to prevent connections from arbitrary source IP addresses. For Websense Web Filter version 7.0, restrict access to TCP port 1812 to prevent connections from arbitrary source IP addresses.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2009-5120

Affected Products

Apache Tomcat

Websense Web Filter

Websense Web Security

References · 2

• http://websense.com/support/article/t-kbarticle/v7-Apache-Tomcat-security-vulnerabilities-1258048503850 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-5120 · Security Note