PT-2015-5844 · Websense · Websense Triton Ap-Web+1
Cengiz Han Sahin
·
Published
2015-03-25
·
Updated
2018-10-09
·
CVE-2015-2703
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Websense TRITON AP-WEB versions prior to 8.0.0
Websense V-Series appliances version 7.7
Description
The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the
ws-userip in the ws-encdata parameter to "cve-bin/moreBlockInfo.cgi" in the Data Security block page or the admin msg parameter to "configure/ssl ui/eva-config/client-cert-import wsoem.html" in the Content Gateway. The vulnerability arises because the parameters are not properly handled in an error message.Recommendations
For Websense TRITON AP-WEB versions prior to 8.0.0, update to version 8.0.0 or later.
For Websense V-Series appliances version 7.7, update to a version later than 7.7.
As a temporary workaround, consider restricting access to the "cve-bin/moreBlockInfo.cgi" and "configure/ssl ui/eva-config/client-cert-import wsoem.html" pages to minimize the risk of exploitation. Avoid using the
ws-userip and admin msg parameters in the affected API endpoints until the issue is resolved.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Websense Triton Ap-Web
Websense V-Series