PT-2015-4360 · Websense · Websense Triton V-Series

Published 2015-03-27 · Updated 2016-06-23 · CVE-2014-9712

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Websense TRITON V-Series appliances versions prior to 7.8.3 Hotfix 03 Websense TRITON V-Series appliances versions prior to 7.8.4 Hotfix 01

Description The issue allows remote administrators to read arbitrary files and obtain passwords via a crafted path.

Recommendations For versions prior to 7.8.3 Hotfix 03, update to 7.8.3 Hotfix 03 or later. For versions prior to 7.8.4 Hotfix 01, update to 7.8.4 Hotfix 01 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-9712

Affected Products

Websense Triton V-Series

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-9712 · Security Note
• http://websense.com/support/article/kbarticle/v7-8-3-About-Hotfix-03-for-V-Series-Appliance · Vendor Advisory
• http://websense.com/support/article/kbarticle/v7-8-4-About-Hotfix-01-for-V-Series-Appliance · Vendor Advisory
• http://securityfocus.com/bid/73417 · Note