| Package | Affected versions | Patched versions |
|---|---|---|
| superscout web filter | = 3.0= 3.0.3 | |
| web filter | = 4.0= 4.1 |
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free