| Package | Affected versions | Patched versions |
|---|---|---|
| websense web security | = 6.3.0= 6.3.1= 6.3.2= 6.3.3= 7.0= 7.1= 7.1.1= 7.5= 7.5.1≤ 7.6 |
The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a crafted userRoles field, in a cookie, as demonstrated by a request to explorer_wse/favorites.exe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free