| Package | Affected versions | Patched versions |
|---|---|---|
| triton | = 7.8.3 | |
| v-series appliances | ≤ 7.7 |
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free