PT-2012-1356 · Websense+1 · Websense Web Filter+5

Mrhinkydink · Published 2012-08-23 · Updated 2012-08-23 · CVE-2010-5144

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Websense Enterprise versions 6.3.3 and earlier Websense Web Security versions 6.3.3 and earlier Websense Web Filter versions 6.3.3 and earlier

Description The issue allows remote attackers to bypass intended filtering and monitoring activities for web traffic. This is achieved via an HTTP Via header when the ISAPI Filter plug-in is used with a Microsoft ISA or Microsoft Forefront TMG server.

Recommendations For Websense Enterprise versions 6.3.3 and earlier, consider restricting access to the ISAPI Filter plug-in until a fix is available. For Websense Web Security versions 6.3.3 and earlier, avoid using the ISAPI Filter plug-in in conjunction with Microsoft ISA or Microsoft Forefront TMG servers until the issue is resolved. For Websense Web Filter versions 6.3.3 and earlier, as a temporary workaround, consider disabling the ISAPI Filter plug-in to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-5144

Affected Products

Isapi Filter

Forefront Tmg

Isa

Websense Enterprise

Websense Web Filter

Websense Web Security

References · 4

• 🔥 http://mrhinkydink.blogspot.com/2010/05/websense-633-via-bypass.html · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html · Exploit
• http://websense.com/support/article/t-kbarticle/Web-Security-Vulnerability-Microsoft-ISA-Server-Integrations · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5144 · Security Note