CVE-2010-5144

MEDIUM 4.3CVE-2010-5144 · Published 23/08/2012 · updated 16/06/2026

In short

CVE-2010-5144 is a MEDIUM (CVSS 4.3) vulnerability affecting websense (websense), websense web filter (websense), websense web security (websense).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
websense websense	`= 6.3.0= 6.3.1≤ 6.3.3`	No fix yet
websense web filter websense	`= 6.3.0= 6.3.1≤ 6.3.3`	No fix yet
websense web security websense	`= 6.3.0= 6.3.1= 6.3.3`	No fix yet

Description

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.

References

archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html · Exploit
mrhinkydink.blogspot.com/2010/05/websense-633-via-bypass.html · Exploit
websense.com/support/article/t-kbarticle/Web-Security-Vulnerability-Microsoft-ISA-Server-Integrations · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free