4.3

CVE-2010-5144

Exploit
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Websense ≫ Websense Update - Edition enterprise Version <= 6.3.3
Websense ≫ Websense Version 6.3.0 Update - Edition enterprise
Websense ≫ Websense Version 6.3.1 Update - Edition enterprise
Websense ≫ Websense Web Security Version 6.3.0
Websense ≫ Websense Web Security Version 6.3.1
Websense ≫ Websense Web Security Version 6.3.3
Websense ≫ Websense Web Filter Version <= 6.3.3
Websense ≫ Websense Web Filter Version 6.3.0
Websense ≫ Websense Web Filter Version 6.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.707
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html
Exploit
http://mrhinkydink.blogspot.com/2010/05/websense-633-via-bypass.html
Exploit
http://www.websense.com/support/article/t-kbarticle/Web-Security-Vulnerability-Microsoft-ISA-Server-Integrations
Vendor Advisory