CVE-2008-4646

LOW 2.1CVE-2008-4646 · Published 22/10/2008 · updated 16/06/2026

In short

CVE-2008-4646 is a LOW (CVSS 2.1) vulnerability affecting enterpise (websense).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 23.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterpise websense	`= 6.3.2`	No fix yet

Description

The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.

References

secunia.com/advisories/32264 · Vendor Advisory
securityfocus.com/bid/31746
securitytracker.com/id
vupen.com/english/advisories/2008/2819
zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt

More vulnerabilities in enterpise

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free